General
- Target grab.exe
- Size 38.7MB
- Sample260710-1qlalady8z
- SHA256 cb1f7add29cb481acc5411396a1bffe3cb9d7679cc5cc6caef5525ab9b50f5ad
- MD5 264721d81defd88f5b9ae58db80c880a
- SHA1 73758427b6d19427a46a1f166c66a2db9359463b
- SHA512 11d8acaa3d48e5c112f389cf6cad438fcac7279e2d0a1f32fb03ee4c581782109a96454d8777184940d4543ff1ab33d600433204b9253a1e7d56f103484c9b24
- SSDEEP 786432:hDq/UbS4ce2IVm8p5v58KPFRphgUC+nT5T5M4cBo+mmijeqzp3tIvl7Ow1Q:hDq/34ftz5RdNPhgOTh64KijhzVwOw1Q
- TLSH T1D79733A17B5059BBE8E1073179FCCE6252B362CB6B61943F0BF006765C6F6C40A783A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
grab.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
grab.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target grab.exe
- Size 38.7MB
- SHA256 cb1f7add29cb481acc5411396a1bffe3cb9d7679cc5cc6caef5525ab9b50f5ad
- MD5 264721d81defd88f5b9ae58db80c880a
- SHA1 73758427b6d19427a46a1f166c66a2db9359463b
- SHA512 11d8acaa3d48e5c112f389cf6cad438fcac7279e2d0a1f32fb03ee4c581782109a96454d8777184940d4543ff1ab33d600433204b9253a1e7d56f103484c9b24
- SSDEEP 786432:hDq/UbS4ce2IVm8p5v58KPFRphgUC+nT5T5M4cBo+mmijeqzp3tIvl7Ow1Q:hDq/34ftz5RdNPhgOTh64KijhzVwOw1Q
- TLSH T1D79733A17B5059BBE8E1073179FCCE6252B362CB6B61943F0BF006765C6F6C40A783A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks for VMWare drivers on disk
-
Loads dropped DLL