General
- Target roar.exe
- Size 70.4MB
- Sample260620-vntw3af14q
- SHA256 5535c6e8aabb63ee673f54a8baa78b04f0f848eaaf57aadaa374d33b8f5f0420
- MD5 eac5f556460938658717d7b48908b8d9
- SHA1 12690985ed52ab9b05a5c33e8a3a82710df44f39
- SHA512 e33ce150f31cc1d6542012f52678e8e75315f1f60a07b78bc7c7d4c661cae8600c3a29400175a8c22ca853680946452dfb566e83f81fa21f6c026835d85586ca
- SSDEEP 1572864:mD5/OTmWyKWKumUq7iynYAtMcA8sRrDOpip:mD5ewmxuynlMbtDOy
- TLSH T1F3F733B15F7A59DCCD031C3080868EC8C15BE0626A94C09787F36E9E7BB9BD9952CBC1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
roar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
roar.exe
Resource
win11ltsc2024-20260617-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target roar.exe
- Size 70.4MB
- SHA256 5535c6e8aabb63ee673f54a8baa78b04f0f848eaaf57aadaa374d33b8f5f0420
- MD5 eac5f556460938658717d7b48908b8d9
- SHA1 12690985ed52ab9b05a5c33e8a3a82710df44f39
- SHA512 e33ce150f31cc1d6542012f52678e8e75315f1f60a07b78bc7c7d4c661cae8600c3a29400175a8c22ca853680946452dfb566e83f81fa21f6c026835d85586ca
- SSDEEP 1572864:mD5/OTmWyKWKumUq7iynYAtMcA8sRrDOpip:mD5ewmxuynlMbtDOy
- TLSH T1F3F733B15F7A59DCCD031C3080868EC8C15BE0626A94C09787F36E9E7BB9BD9952CBC1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
A stealer written in Python and packaged with Pyinstaller
-
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
-
Loads dropped DLL