Overview

overview

10

Static

static

10

2026-07-09...er.exe

windows10-2004-x64

10

2026-07-09...er.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-07-09_652148b2298113ed238eb39eccc1efb6_aspxspy_coinminer_dosia_glassworm_hacktools_luca-stealer_malwareactor_omgwtfbbqapt_ngrbot_poet-rat_quasar-rat_rex_webshell-shell_zxxz
  • Size 92.0MB
  • Sample260709-cma4fsbx8l
  • SHA256 4762417b6b30cce019e80e3abee6aa653021a9ad7151fafb1371179ffd393a1d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
blankgrabberstealer

Malware Config

Targets

    • Target
      2026-07-09_652148b2298113ed238eb39eccc1efb6_aspxspy_coinminer_dosia_glassworm_hacktools_luca-stealer_malwareactor_omgwtfbbqapt_ngrbot_poet-rat_quasar-rat_rex_webshell-shell_zxxz
    • Size 92.0MB
    • SHA256 4762417b6b30cce019e80e3abee6aa653021a9ad7151fafb1371179ffd393a1d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    blankgrabberstealer

    • A stealer written in Python and packaged with Pyinstaller

    • Family: blankgrabber

      Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.

      stealerblankgrabber
    • Custom signature

      Detects Windows executables referencing non-Windows User-Agents

    • Custom signature

      Detects executables (downlaoders) containing URLs to raw contents of a paste

    • Custom signature

      Detects executables containing URLs to raw contents of a Github gist

    • Custom signature

      Detects executables containing possible sandbox analysis VM usernames

    • Custom signature

      Detects executables referencing credit card regular expressions

    • Custom signature

      Detects executables referencing many confidential data stores found in browsers, mail clients, crypt

    • Custom signature

      Detects executables referencing many varying, potentially fake Windows User-Agents

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks