Skip to content

Infostealer

GaboonGrabber

According to ANY.RUN, the GaboonGrabber is a malware developed in .NET that grabs its embedded resources to prepare multiple fileless stages.

GaboonGrabber is a Windows infostealer.

Background

Per ANY.RUN, GaboonGrabber is a .NET-based malware that pulls from its embedded resources to assemble several fileless stages. It frequently disguises itself as a legitimate program, even imitating genuine applications within its decompiled code, and it carries a steganographic image used to build out additional payloads.

Its final stage is capable of dropping a variety of malware families, among them Snake Keylogger, AgentTesla, Redline, and Lokibot.


Source: Malpedia (Fraunhofer FKIE).