Resubmissions

25/06/2026, 18:30

260625-w5nxtaev4t10

25/06/2026, 18:23

260625-w1vvkaex5k10

General

  • Target
    Leitostrap.exe
  • Size 46.8MB
  • Sample260625-w5nxtaev4t
  • SHA256 bbcbcf566a69ade740210a382a65f50cb15eef8cd93a863e855bd068437db5d6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Leitostrap.exe
    • Size 46.8MB
    • SHA256 bbcbcf566a69ade740210a382a65f50cb15eef8cd93a863e855bd068437db5d6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • A stealer written in Python and packaged with Pyinstaller

    • Family: blankgrabber

      Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.

    • Loads dropped DLL

    • Checks whether UAC is enabled

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Network Share Discovery

      Attempt to gather information on host network.

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v16

Tasks