26e0644cf7ad60cc0d8aebe5381251eacc124860a969cb5db5c8aab83c86a2b3 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

grabber.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
grabber.exe
Size 7.2MB
Sample261029-w354baft4k
SHA256 26e0644cf7ad60cc0d8aebe5381251eacc124860a969cb5db5c8aab83c86a2b3
MD5 1fa9c0a151cf3638c103765f158af242
SHA1 a2518f469044df9fa50e4f509ee39e673c3d5532
SHA512 71b78b0a7d88b51c47e5bd7256911a2d3ce760037e737fa41b242801c74966abb906e9e1d6b291db2b712f9bcc8b9085afb4e439bed73669ce84ecda6f9fb6ed
SSDEEP 49152:uep6lLA4hkJl9CaCegH4ChMzvoIz/JCPSth3MR92d5DUM7X4a3NVtxaGDOjkKCKr:u99mDxCOzr9KEoEoa7DsA2TEo
TLSH
T188763807ECA558E8C1AED23489769513BF70BC494B3127D71B90F6242F76BE0ADB9384
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution persistence spyware trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

grabber.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

8 signatures

150 seconds

defense_evasion discovery execution persistence spyware trojan

Malware Config

Targets

- Target
  grabber.exe
- Size 7.2MB
- SHA256 26e0644cf7ad60cc0d8aebe5381251eacc124860a969cb5db5c8aab83c86a2b3
- MD5 1fa9c0a151cf3638c103765f158af242
- SHA1 a2518f469044df9fa50e4f509ee39e673c3d5532
- SHA512 71b78b0a7d88b51c47e5bd7256911a2d3ce760037e737fa41b242801c74966abb906e9e1d6b291db2b712f9bcc8b9085afb4e439bed73669ce84ecda6f9fb6ed
- SSDEEP 49152:uep6lLA4hkJl9CaCegH4ChMzvoIz/JCPSth3MR92d5DUM7X4a3NVtxaGDOjkKCKr:u99mDxCOzr9KEoEoa7DsA2TEo
- TLSH
  T188763807ECA558E8C1AED23489769513BF70BC494B3127D71B90F6242F76BE0ADB9384
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution persistence spyware trojan
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionpersistencespywaretrojan

© 2018-2026

Terms | Privacy