blankgrabber

General

Target
https://www.mediafire.com/file/105zxykw3v4hxid/Zeus+Crypter+2024.zip/file
Sample260329-1ccrasds7q

Score

10^/10

Malware Config

Targets

- Target
  https://www.mediafire.com/file/105zxykw3v4hxid/Zeus+Crypter+2024.zip/file
Score

10^/10

collection credential_access defense_evasion discovery execution blankgrabber milleniumrat xmrig miner pyinstaller rat stealer upx
- A stealer written in Python and packaged with Pyinstaller
- Blankgrabber family
  blankgrabber
- Detects MilleniumRAT stealer
- MilleniumRat
  MilleniumRat is a remote access trojan written in C#.
  rat stealer milleniumrat
- Milleniumrat family
  milleniumrat
- Xmrig family
  xmrig
- blankgrabber
  Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
  stealer blankgrabber
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
- Disables one or more Microsoft Defender components
  Uses the Powershell Set-MpPreference cmdlet to disable one or more Microsoft Defender components.
  defense_evasion
- Uses browser remote debugging
  Can be used control the browser and steal sensitive information such as credentials and session cookies.
  credential_access stealer
- Clipboard Data
  Adversaries may collect data stored in the clipboard from users copying information within or between applications.
  collection
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
- Obfuscated Files or Information: Command Obfuscation
  Adversaries may obfuscate content during command execution to impede detection.
  defense_evasion
- Enumerates processes with tasklist
  discovery
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1