General
- Target Leitostrap.exe
- Size 46.8MB
- Sample260625-w5nxtaev4t
- SHA256 bbcbcf566a69ade740210a382a65f50cb15eef8cd93a863e855bd068437db5d6
- MD5 114da93de854d823d8f008fe66015da1
- SHA1 9083a0eacbd7d1e66ce53f4c5233a3175c2f9784
- SHA512 0658e2aba1d7ea1bf7a9b2fc62d7e169088946a48ac0e32cdad00488ed2fcde139babe8117b238de4382bf467b4c48e4dea92299fd0b338c013dbab63b6b95b1
- SSDEEP 786432:CFUdiNEDri2VE7AcqwnQ3elMUtEqefBz96:CLh2VEJEqwP6
- TLSH T1A9B77C02B27550AAE966D0B48A175167A770FC2A273067EB30D9B5392F33FE15E3C748
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Leitostrap.exe
Resource
win10ltsc2021-20260513-en
16 signatures
900 seconds
Malware Config
Targets
-
- Target Leitostrap.exe
- Size 46.8MB
- SHA256 bbcbcf566a69ade740210a382a65f50cb15eef8cd93a863e855bd068437db5d6
- MD5 114da93de854d823d8f008fe66015da1
- SHA1 9083a0eacbd7d1e66ce53f4c5233a3175c2f9784
- SHA512 0658e2aba1d7ea1bf7a9b2fc62d7e169088946a48ac0e32cdad00488ed2fcde139babe8117b238de4382bf467b4c48e4dea92299fd0b338c013dbab63b6b95b1
- SSDEEP 786432:CFUdiNEDri2VE7AcqwnQ3elMUtEqefBz96:CLh2VEJEqwP6
- TLSH T1A9B77C02B27550AAE966D0B48A175167A770FC2A273067EB30D9B5392F33FE15E3C748
- MD5 SHA1 SHA512 SSDEEP TLSH
-
A stealer written in Python and packaged with Pyinstaller
-
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates processes with tasklist