General
- Target 2026-06-10_022ecc20a6fe98ebdfc96451dc8b472e_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 34.9MB
- Sample260610-clfmjsdv5p
- SHA256 c3cb8985c6ca5d9ad34c55e90b23561a561579c037e714b6521901b135f8c942
- MD5 022ecc20a6fe98ebdfc96451dc8b472e
- SHA1 7cf4f701c13036094a00a32b576d41895becf8b6
- SHA512 e75e5585447f58e6ebf68d5263a973ea96d17bd52226b3ee75887fabe77adde366a6c9abdb8817eff7a4e09b9f84ada749eaa7ff132481a5b8eb15a73053da46
- SSDEEP 786432:TBUK9GN3nvzyPzA3/rZ0dyHmyqLw2FCXcSdPcbYzfIMP:teN3n0c/rZ0dyGyqLw2UXc5bKf
- TLSH T15C873305BEF118ABEF67DAF4AA97222AE17D3E902715C5C787A5171CCF603A74D281C0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-10_022ecc20a6fe98ebdfc96451dc8b472e_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-10_022ecc20a6fe98ebdfc96451dc8b472e_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-10_022ecc20a6fe98ebdfc96451dc8b472e_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 34.9MB
- SHA256 c3cb8985c6ca5d9ad34c55e90b23561a561579c037e714b6521901b135f8c942
- MD5 022ecc20a6fe98ebdfc96451dc8b472e
- SHA1 7cf4f701c13036094a00a32b576d41895becf8b6
- SHA512 e75e5585447f58e6ebf68d5263a973ea96d17bd52226b3ee75887fabe77adde366a6c9abdb8817eff7a4e09b9f84ada749eaa7ff132481a5b8eb15a73053da46
- SSDEEP 786432:TBUK9GN3nvzyPzA3/rZ0dyHmyqLw2FCXcSdPcbYzfIMP:teN3n0c/rZ0dyGyqLw2UXc5bKf
- TLSH T15C873305BEF118ABEF67DAF4AA97222AE17D3E902715C5C787A5171CCF603A74D281C0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
A stealer written in Python and packaged with Pyinstaller
-
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
-
Possible privilege escalation attempt
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions