Resubmissions
03/06/2026, 14:46
260603-r5myasay2l02/06/2026, 17:20
260602-vwq55scx4j801/06/2026, 17:48
260601-wdngzab14v801/06/2026, 17:09
260601-vpehrsa16x801/06/2026, 16:51
260601-vc1v8sax711001/06/2026, 16:50
260601-vcmzdaax7y801/06/2026, 16:47
260601-vavlfaax21801/06/2026, 16:40
260601-t6jy5sav918General
- Target https://download2333.mediafire.com/y46fj2kxo6ug0EFvlMEa6SM87Rp_cCmFCZcb89vo2dqYP8fj0iLWLAudzYXbADpMOXFy07id8xzgpuqb1uKdbszZ2toYm4AeLwt8qMmlfc6DEAobvh90rSG8bx4Jm26iF6w8DmJVbDptBT0zq1nIFOX1TQjKkzlcew4tu-_3/jztwgxcrsfk6mxi/bloxdclient-new.exe
- Sample260601-vc1v8sax71
Score
10/10
Malware Config
Targets
-
- Target https://download2333.mediafire.com/y46fj2kxo6ug0EFvlMEa6SM87Rp_cCmFCZcb89vo2dqYP8fj0iLWLAudzYXbADpMOXFy07id8xzgpuqb1uKdbszZ2toYm4AeLwt8qMmlfc6DEAobvh90rSG8bx4Jm26iF6w8DmJVbDptBT0zq1nIFOX1TQjKkzlcew4tu-_3/jztwgxcrsfk6mxi/bloxdclient-new.exe
Score10/10-
A stealer written in Python and packaged with Pyinstaller
-
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1