General
- Target 2026-06-28_df03e3d1ea0476c6deebf9fab4cac972_akira_blankgrabber_cobalt-strike_coinminer_emotet_glassworm_icedid_njrat_pos_rusty-stealer_satacom_vidar
- Size 54.8MB
- Sample260628-w6eersb16k
- SHA256 4bec4a70b41229f02c5759b0cbd59f5b7e22e28da8b9c3d536386069b70b7805
- MD5 df03e3d1ea0476c6deebf9fab4cac972
- SHA1 84322dd61a582f8c9693ce6e01441d5ed655383d
- SHA512 0d8cb8606653390f859696287cd2586b2c27e9fa0c37424e90b6c9e7acf07d5901384414cd422557d614c0695fa0492e74ca41dcd54970c98215ef267b882e36
- SSDEEP 786432:OZ8b6DczuA2LEeFRhbUvpncmIsZAa346fiH0cODt:OZy6k2LEVZAyRaUcODt
- TLSH T15CC78D5673600046EA76D0B8CA579B23EF717C9A076466DB20D4F6A43F73EE12BBD204
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-28_df03e3d1ea0476c6deebf9fab4cac972_akira_blankgrabber_cobalt-strike_coinminer_emotet_glassw.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_df03e3d1ea0476c6deebf9fab4cac972_akira_blankgrabber_cobalt-strike_coinminer_emotet_glassw.exe
Resource
win11ltsc2024-20260618-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_df03e3d1ea0476c6deebf9fab4cac972_akira_blankgrabber_cobalt-strike_coinminer_emotet_glassworm_icedid_njrat_pos_rusty-stealer_satacom_vidar
- Size 54.8MB
- SHA256 4bec4a70b41229f02c5759b0cbd59f5b7e22e28da8b9c3d536386069b70b7805
- MD5 df03e3d1ea0476c6deebf9fab4cac972
- SHA1 84322dd61a582f8c9693ce6e01441d5ed655383d
- SHA512 0d8cb8606653390f859696287cd2586b2c27e9fa0c37424e90b6c9e7acf07d5901384414cd422557d614c0695fa0492e74ca41dcd54970c98215ef267b882e36
- SSDEEP 786432:OZ8b6DczuA2LEeFRhbUvpncmIsZAa346fiH0cODt:OZy6k2LEVZAyRaUcODt
- TLSH T15CC78D5673600046EA76D0B8CA579B23EF717C9A076466DB20D4F6A43F73EE12BBD204
- MD5 SHA1 SHA512 SSDEEP TLSH
-
A stealer written in Python and packaged with Pyinstaller
-
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
-
UPX dump on OEP (original entry point)
-
Creates new service(s)
-
Executes dropped EXE
-
Loads dropped DLL
-
Stops running service(s)
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1System Services
2Service Execution
2Persistence
Create or Modify System Process
2Windows Service
2Event Triggered Execution
1Netsh Helper DLL
1