General
- Target Screenshot 2026-06-07 210943.png
- Size 26KB
- Sample260608-vcg35act5t
- SHA256 8a1a1e3674143d9c803aa9a09ee97a9dc9f15426c71e6fe28372d607c59b210a
Score
10/10
Malware Config
Targets
-
- Target Screenshot 2026-06-07 210943.png
- Size 26KB
- SHA256 8a1a1e3674143d9c803aa9a09ee97a9dc9f15426c71e6fe28372d607c59b210a
Score10/10A stealer written in Python and packaged with Pyinstaller
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
Disables one or more Microsoft Defender components
Uses the Powershell Set-MpPreference cmdlet to disable one or more Microsoft Defender components.
Downloads MZ/PE file
Executes dropped EXE
Loads dropped DLL
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
Enumerates processes with tasklist
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.