General
- Target grab.exe
- Size 38.2MB
- Sample260710-147ezscs8k
- SHA256 7586611b2d0d198dfa9fab7273520652b31add65d773b8528a8dc0e5dcf31639
- MD5 d51d7e09912a71e55f190c1027aa786f
- SHA1 2793838ca3b8b4c35432a26c23b032d081eb1a57
- SHA512 1d6ab1314b39c00774dd2936f2eced399cf110cf0792ea4a5e8c771f5f1a0e9253ca2fc4cffece5881de8e7a8f0dc95a3ed66af0b2cbd5b2bfeff66987ebb048
- SSDEEP 786432:YDq/UbS4ce2IVm8pA/58KPFRphgUC+nT5T5hBo+mmijeqzp3tIvl7Ow1N:YDq/34ftzKdNPhgOThFijhzVwOw1N
- TLSH T19F9733A27A515ABBD8E2063079FCCF6292B361C67F62D43F0BF006765D6B6C40978361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
grab.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
grab.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target grab.exe
- Size 38.2MB
- SHA256 7586611b2d0d198dfa9fab7273520652b31add65d773b8528a8dc0e5dcf31639
- MD5 d51d7e09912a71e55f190c1027aa786f
- SHA1 2793838ca3b8b4c35432a26c23b032d081eb1a57
- SHA512 1d6ab1314b39c00774dd2936f2eced399cf110cf0792ea4a5e8c771f5f1a0e9253ca2fc4cffece5881de8e7a8f0dc95a3ed66af0b2cbd5b2bfeff66987ebb048
- SSDEEP 786432:YDq/UbS4ce2IVm8pA/58KPFRphgUC+nT5T5hBo+mmijeqzp3tIvl7Ow1N:YDq/34ftzKdNPhgOThFijhzVwOw1N
- TLSH T19F9733A27A515ABBD8E2063079FCCF6292B361C67F62D43F0BF006765D6B6C40978361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox DLL files
-
Looks for VirtualBox drivers on disk
-
Looks for VMWare drivers on disk
-
Loads dropped DLL