General
- Target grabber_1784602313.exe
- Size 16.5MB
- Sample260721-dct91sc18p
- SHA256 7dc0a2ce8c80b2ca3584c09d2d4645e04662e4a0d54c7dc827a453732a2bdcb0
- MD5 2d0a6974a492fe2a6abd0c507b736790
- SHA1 6baee14e4f1eae5b6065f6ab8b7e158cebd9dbdb
- SHA512 9c5eeba54ab3920baf2452c546e767510246540204ef90c446e12a5241b899f90b2a4f3398f0b51c6b746eb4d0521fad76a4e92a5a2901801ed73e1a046afcf7
- SSDEEP 393216:0n7LDBopgIfUKOcFXEAphVtpIwQSg+SPm5CtTIvF7duplk:sfi58KPFRphFBo+PCtUvF7H
- TLSH T15F0733A8B6814EBAF4F7453C19658921F1B272102F86D2FF07F106252E3B7814E796F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
grabber_1784602313.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target grabber_1784602313.exe
- Size 16.5MB
- SHA256 7dc0a2ce8c80b2ca3584c09d2d4645e04662e4a0d54c7dc827a453732a2bdcb0
- MD5 2d0a6974a492fe2a6abd0c507b736790
- SHA1 6baee14e4f1eae5b6065f6ab8b7e158cebd9dbdb
- SHA512 9c5eeba54ab3920baf2452c546e767510246540204ef90c446e12a5241b899f90b2a4f3398f0b51c6b746eb4d0521fad76a4e92a5a2901801ed73e1a046afcf7
- SSDEEP 393216:0n7LDBopgIfUKOcFXEAphVtpIwQSg+SPm5CtTIvF7duplk:sfi58KPFRphFBo+PCtUvF7H
- TLSH T15F0733A8B6814EBAF4F7453C19658921F1B272102F86D2FF07F106252E3B7814E796F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks for VMWare Tools registry key
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.