blankgrabber | cc1646a4e7910531f22870900f518b580837c1eb07af58b46d54538ab24a8d49

General

Target
Downloads.zip
Size 137.1MB
Sample260620-ktflhsd14j
SHA256 cc1646a4e7910531f22870900f518b580837c1eb07af58b46d54538ab24a8d49
MD5 8525301542b202e91f5204ba02f7e4f2
SHA1 7090be141de5f522cbe4648812ea756d069d92b6
SHA512 9bcae695cbd02a893543a6739d5aa46a15bf4bc3fcb7c625c3ff14db347d28104717defbc0b4cf11b129d56c8386e7bfdd53323589f8bafd74bbef4631bf2074
SSDEEP 3145728:GKe6tr2BgglQqPtWJYZo5RjsBI357fj6P14iV:b8BgiPtWJoowBYuPeiV
TLSH
T1C66833E04672CE6BD2ED33FA47683903EA5A152815F1CF91CB8EA97172775F40931C8A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  AstroAssist.exe
- Size 128.2MB
- SHA256 95255e44a975315bf8b332623179e3468c363c238320763785b12b09538539f5
- MD5 7e4fa6fc18e8bdf1f02e473a77a61093
- SHA1 f8624de2a1b036bc11981c29bb2a8d5b683e74dc
- SHA512 3d7c03763cf526c2ee5c1ee737179a277c62ddcfa6bfcb82086358dc6f801be0406cc67000309254613fce7f492a78352d087bd9ee5f79654637084336e2065b
- SSDEEP 3145728:xdn+chRVGKvoF+PK3ef1G6Sx8/l4/cAiH:xdRhR3oF+PcetSqcfi
- TLSH
  T1AB58338040B3CE5FE0DD73BA8AA43452FA995E7416704DF6CF1DB8E8B673EE0462550A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

blankgrabber stealer
- A stealer written in Python and packaged with Pyinstaller
- Family: blankgrabber
  Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
  stealer blankgrabber
- Loads dropped DLL
behavioral1
- Target
  HidHide_1.5.230_x64.exe
- Size 7.7MB
- SHA256 f4bbbcb82e6258641b887c74bc81c4c5f66e4aa811808dfc304347687b7605f6
- MD5 705173711090d36275d62ca7b111bfc3
- SHA1 f7de49272cbd8a8912f511c3a11471be05b44e2a
- SHA512 d535b8a7ad3d72c2e9b602c59b68ca265c41d500294a7d56d94d8c188277f7f69b8526f5c9a57af3f5bceec18560cb3622aa767e4571c724a299733e78c1f1bc
- SSDEEP 196608:fWFsTuRN2zahf1Y7EcnGf7a+JJIlAmnVTvQf2bu:OFsTuRN2zsmEzRJJPm2ebu
- TLSH
  T19286D030765EC52AD56205F0592CAB9B911CAE3D0B61E4C7B3CC6D6F2B744CB0636E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral2
- Target
  ViGEmBus_1.22.0_x64_x86_arm64.exe
- Size 6.0MB
- SHA256 89220a7865076b342892f98865f3499fb7c4cfd673159e89d352c360fd014c6a
- MD5 a62717e3e4306de1dca4fb5c2fa0ac6c
- SHA1 5ec1b1077b43e82c2d3712909c7ed80dd59504dd
- SHA512 960b2cf7d3e301fc8a260ed49a136ffe8c1e30406a4eb64b7ceeaf7f56f33bbb5153825670258a2e254d3dbdb09c0f0f4abffcbb70395416f213a0e2b8061366
- SSDEEP 98304:shxzP3MqBfTluw4yctnfZeos/9/5oe3UOv2NkHLcgpn78NpoEXBhLlvRJSvr0/Pr:s/PdfTUHNY/5oe3UdNWVx78NpBXBhETS
- TLSH
  T1E756AE31724AC53BD96211B11A2C9E9F612CBE350BB254C7B3DC2E6E1BB54C21736E27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3