General
- Target 2026-06-04_84206a820895c3901f2fde477516b72a_akira_amadey_blankgrabber_elex_glassworm
- Size 46.5MB
- Sample260604-n2mxcaex6n
- SHA256 be715b4e472b9318c553664e569a15125b093821675be26bf3b92f8ba5714ddc
- MD5 84206a820895c3901f2fde477516b72a
- SHA1 78b6b13a0f8111aa3247b774589be0882b466655
- SHA512 69e1232eca7efc966085dbc180fd47d96bb1e5fd9bf0cd30f8e1d02cc3942c5fcce745ea90b4f787115b8faabc71367022d14e12845059a87de7b32f13d7f4dc
- SSDEEP 786432:2DB/19RLVku494TzzFu0kZ0z8opGZQRrk7djdbBAMfQCxALwZOHPwF16krc2AgPJ:2DBrRJO9KzAGzPzryZDQCxAEOYwkrcDi
- TLSH T14CB73341FED743F6C98F08B5102EB33FDB385406852CC697EBE54E15E9BA32049EA259
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_84206a820895c3901f2fde477516b72a_akira_amadey_blankgrabber_elex_glassworm.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_84206a820895c3901f2fde477516b72a_akira_amadey_blankgrabber_elex_glassworm.exe
Resource
win11-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_84206a820895c3901f2fde477516b72a_akira_amadey_blankgrabber_elex_glassworm
- Size 46.5MB
- SHA256 be715b4e472b9318c553664e569a15125b093821675be26bf3b92f8ba5714ddc
- MD5 84206a820895c3901f2fde477516b72a
- SHA1 78b6b13a0f8111aa3247b774589be0882b466655
- SHA512 69e1232eca7efc966085dbc180fd47d96bb1e5fd9bf0cd30f8e1d02cc3942c5fcce745ea90b4f787115b8faabc71367022d14e12845059a87de7b32f13d7f4dc
- SSDEEP 786432:2DB/19RLVku494TzzFu0kZ0z8opGZQRrk7djdbBAMfQCxALwZOHPwF16krc2AgPJ:2DBrRJO9KzAGzPzryZDQCxAEOYwkrcDi
- TLSH T14CB73341FED743F6C98F08B5102EB33FDB385406852CC697EBE54E15E9BA32049EA259
- MD5 SHA1 SHA512 SSDEEP TLSH
-
A stealer written in Python and packaged with Pyinstaller
-
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled