General
-
Target
grabbot_0.1.5.1.vir
-
Size
448KB
-
Sample
200719-xlz8q16852
-
MD5
fb246fbbfe59a85e2c8c87e91fe61b03
-
SHA1
a3288f091946a3aa501764956ecd50a7acb6e668
-
SHA256
17caf35a2b09b1852f4fa12f3474dd7dbf90c1692c64b8ce167039319450a959
-
SHA512
c03d9a0b10fd63d625caef1629daa548128cad6fe5a6b614cf495e6eda51eaad54d06afe81f6884402dfeaee281b29c427975092bb392bfad5ee12bd71588921
Static task
static1
Behavioral task
behavioral1
Sample
grabbot_0.1.5.1.vir.exe
Resource
win7v200430
Behavioral task
behavioral2
Sample
grabbot_0.1.5.1.vir.exe
Resource
win10
Malware Config
Targets
-
-
Target
grabbot_0.1.5.1.vir
-
Size
448KB
-
MD5
fb246fbbfe59a85e2c8c87e91fe61b03
-
SHA1
a3288f091946a3aa501764956ecd50a7acb6e668
-
SHA256
17caf35a2b09b1852f4fa12f3474dd7dbf90c1692c64b8ce167039319450a959
-
SHA512
c03d9a0b10fd63d625caef1629daa548128cad6fe5a6b614cf495e6eda51eaad54d06afe81f6884402dfeaee281b29c427975092bb392bfad5ee12bd71588921
Score7/10-
Deletes itself
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-