blankgrabber | 6e0289eb5a3aa076eb97ea99c5d5465cb48b5ecc6a3257dc3d811f881a1747c9

Sharing

Copy URL Twitter E-mail

General

Target
nvda_2026.1.1.exe
Size 60.0MB
Sample260709-t4xr8aew2z
SHA256 6e0289eb5a3aa076eb97ea99c5d5465cb48b5ecc6a3257dc3d811f881a1747c9
MD5 329b7b827910b5b930eda3fb19f49f9f
SHA1 f35e30cd3c1c6375be52d0acaba701c5f6ddc7bd
SHA512 6d6e6efb1514d3dec053db74d60d86aa4b804839413e3debe7db03743b43cad3106cdea553f8e03c952d0d95d4acab8d0e8008e40cdf5a9f90a2d365b067d37c
SSDEEP 1572864:BcwenuwXGwjEYAfRMNtagpE/AcvS0ZqXPvDFuuY:BcowXGqJpsAcvR0XjFuuY
TLSH
T1D6D733F27ECE12F6EF6B393936BB411A5B2AF04D1FD5FD01941168520C9A957282232F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  nvda_2026.1.1.exe
- Size 60.0MB
- SHA256 6e0289eb5a3aa076eb97ea99c5d5465cb48b5ecc6a3257dc3d811f881a1747c9
- MD5 329b7b827910b5b930eda3fb19f49f9f
- SHA1 f35e30cd3c1c6375be52d0acaba701c5f6ddc7bd
- SHA512 6d6e6efb1514d3dec053db74d60d86aa4b804839413e3debe7db03743b43cad3106cdea553f8e03c952d0d95d4acab8d0e8008e40cdf5a9f90a2d365b067d37c
- SSDEEP 1572864:BcwenuwXGwjEYAfRMNtagpE/AcvS0ZqXPvDFuuY:BcowXGqJpsAcvR0XjFuuY
- TLSH
  T1D6D733F27ECE12F6EF6B393936BB411A5B2AF04D1FD5FD01941168520C9A957282232F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery blankgrabber persistence privilege_escalation stealer
- A stealer written in Python and packaged with Pyinstaller
- Family: blankgrabber
  Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
  stealer blankgrabber
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral1 behavioral2
- Target
  $PLUGINSDIR/app/documentation/ar/userGuide.html
- Size 707KB
- SHA256 bac81bd8b4d011d6c36c7c9737af47169e37a976ad68afcf8ef265832247ca6a
- MD5 eb149682cffe33845d5e3516a2006eaa
- SHA1 77e5ace52d01246ef44a5bdfeb6d375b80613187
- SHA512 0f65adfb8621fce4052526b1b9fcbc6a0558fdf3cd4702641ca9f4da3af6b161e40cc206742d6bd6eae84927bd26502b949e75bfeba5da302019622cdf32bdf4
- SSDEEP 6144:Jz3XUJ6J3OTgOytN+5ClbHXCzYn83jmdG/rW23miLYwp3wMwr7kemBwXrDhPUI9E:J7UJ1yt3lbSqGnUEDt
- TLSH
  T1B8F4B7E21B64D8710A628E3EC1D23968E9B3AE339757FD7164431B1386C7523E28F275
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/app/documentation/bg/changes.html
- Size 1.5MB
- SHA256 fee55c0faa1a8069baecd42733568d83ed9ce0bb7e2f2a206691d8021ae3ffb5
- MD5 fa19243da70af4b89ad3e93648c1cce0
- SHA1 ea63a85b18def21ff24692949fcf8ee92b7b18f1
- SHA512 f4e589b3d56a6dd5a5eb51229cc1f5b739b649fbd9aa5c642a4fdb9daabcc4ea14db430b8422d151bd5c58ca80485a8c321e1a7541c43663ac53d7e85be2b232
- SSDEEP 12288:xOZys0pDiGWZTmoy5kuOLxBt0/bVEY4cXUYVwMrN62ayjCe4voXeklp+vYGtO/eA:CQBjevYGt8/GAn
- TLSH
  T18775CE7287A559EE0A01E47BD40DBF19FCAB00FDBF93D787817118AE3196974826B24C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/app/documentation/bg/keyCommands.html
- Size 180KB
- SHA256 c684d5f6bf542770b5f6b0e63b511b96b4a1dc62c84f16e64cdbc2d7cb671a12
- MD5 62da3f2e9108e4ecfbf74960f48e4432
- SHA1 fbf3986da38b6be8d2866a45776e7232add4fc98
- SHA512 aa84355bfc07b6b1e4903957ffbc3069b385ed51f0068ff73d8264753fee8ee07cbe9211af46295af182ecf933823e0b6ec4bc64959dfac78768a8e44b518931
- SSDEEP 1536:iujWUCoPXjcLeemViTDNm+LkMy5SYY4CgNEeMs:4UcL+VANm+LkMy5SYY47NEeMs
- TLSH
  T19E04F67642D5EDBE0822A47AD9017D14BCEB50FE3BA646D2485B2D6F36E2060C37770E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/app/documentation/bg/userGuide.html
- Size 819KB
- SHA256 a06582fa4db417aa8cb5b5b399ee2b7331875f0ac11f68f0588e9a31dd7e09fa
- MD5 6ac3aef7f1d0eb3bfafed6ca4c50ed41
- SHA1 6ff4702c8c0fd33a73214d6d65f4d219635a9f35
- SHA512 e7aaf3ff30d62082bdbd92969b6cbec494fcde7f48085bb9d0136eba1cfc68259ed8051e86041ffd74c3994b055fc5bf071ee394623104f0ddf5e46dc7b93369
- SSDEEP 12288:jdxVN/nNFsJY2cNvgRdeWLcLYS1DZIJ9yK5rRh3wFoSsDjoHG4QD4Rd2mzM+nfia:rDDZBFo3JTe4NEv
- TLSH
  T17605476147DAACAE0502E53FD8047D097CEB44FE3FA6879205662D6F35E2074C6BB24E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/app/documentation/bs/changes.html
- Size 1.1MB
- SHA256 f352a5dc5b91df50fa075030c85ec0f97b1b62580b50fe9a8e4a7078834f2945
- MD5 b827afc0db0952c5eb64280804142b69
- SHA1 99d3a68344e1dbcdf1b5d671ff6e05b0292a6711
- SHA512 e5c807fbabc442111929cea4400b150c7bae36fcc9477b552b1a6debde7a177cadc8ecedb3f57a6791ca5ffdde20e040c459a0b130ba20b7d776376baba6c147
- SSDEEP 3072:9878omX8l8F8Zi8Zv0NTt8uO8QH8z8t/Unm2vbOgOKcG2tyqXE7/FEQFjhq0gr6i:gmyjMNJ+A+ttU7/mQVk61Z9nofqwB
- TLSH
  T14E4546B7D3501FBB4F4144F6514FABBAFA1B0048ED52F2DBD1B3518A120EE3A961B588
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/app/documentation/bs/keyCommands.html
- Size 116KB
- SHA256 106f9b412ab8b39622ccaa719fb2a13506e979a50f391839552b4223b4227d47
- MD5 1358b251480a4b01389819537ba026cc
- SHA1 050ed2f437da77662ac27ac80e30d34948c3deb0
- SHA512 01c032f1e801f6db00d5f1695cf6c9f5e8b2c69d94cc115f62a7a5f41aff4d21ee1a3be411488e90ea1cbf1bf8e01f5f0cf4617bdae264f3ce980c2723cadf77
- SSDEEP 3072:AHWVFgcg1Eo4SMEF4T5C11/0QjHFUP35+4tGztJv73Fl//ae7xsM5aRUw:fVFgcg1Eo4SMEF4T5C11/0QjHFUP35+m
- TLSH
  T16CC3317312D8EE3D5933527AD1066DA1E6DFA174633212D1D84FAE07AB48022C3B739B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral13 behavioral14
- Target
  $PLUGINSDIR/app/documentation/bs/userGuide.html
- Size 472KB
- SHA256 d300bb2e835fc69498cb9abc1a912364f6d0d971b9d3545f097edbb59ce095f1
- MD5 264b78f0e5ce4b1d001d3e342e472329
- SHA1 f59cc3d1a4842ec388cb6cfd57c92982c601b9ea
- SHA512 41a3da397310943b344d97fbf1c74ed4281095496678bd5cc9c53e0b6ed29a33062992650a2a738a4c5a35982f5715a60048dd1c28c7d14b1d2505a499a50c41
- SSDEEP 12288:Zr08L8EAVQI+L2naSMEF4T5W1/0QjZf5a+:rVSNf5a+
- TLSH
  T133A4CA7713D8FF3A09B3027AD1095AB5E7AB4078233216D1A85F9A1B7645022C3B77DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral15 behavioral16
- Target
  $PLUGINSDIR/app/documentation/ca/changes.html
- Size 1.2MB
- SHA256 543bbd69def4f28194ae40f267540545f84f722ca84798f475a45c6b61d70cfb
- MD5 ab4d737401cf8dc25adefc8059ba4e34
- SHA1 71961eb2c98e90a0d404fcf1cc2aed5dbca9f8ec
- SHA512 c5ec2f63b9ac2dfdc94a4085bdf1d4fe28ffd7888bd87e218b0dfa157e8a96ce98531114544d4dcd9ab1fd12b1bc4a519b8b3cf5fc598f0406b264157da56ec7
- SSDEEP 24576:l7SmjGfYh+BOzkFKSjZbqCRVQzIKunDALc/E:l7SmjGfYh+BOzkFKSjZbqCRVQzIKunDI
- TLSH
  T19A455277D3D01FBB4E4149BAA24FEB7BF81A0144ED42E2CBD2B35186120DF69D61B588
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral17 behavioral18
- Target
  $PLUGINSDIR/app/documentation/ca/keyCommands.html
- Size 123KB
- SHA256 d42766f3adfdc21507dd1197e0c597e416a5d75751a7c699f40dbe48e4e97ccc
- MD5 24b7e8f88d478e1df2da12d64a185797
- SHA1 4e95adad7143eff240f84c67539ba68e372e9b1d
- SHA512 ec3a7605aa6d76eefd441c66b558f42c27533ee404b4c87a086d13d08f1a2c4ad1c5910ea6816dbfde1a42df3362cb769da2e00142f2067b208b413a632b394b
- SSDEEP 3072:m0cUBfA0TUPxp0WnPzRzSH4PNdPdcFlmF5FsF64xjekNSh0SdEkN:HcIfc
- TLSH
  T160C3C8B302D8FE3D48B71139D6414C22D1CBA5752332A5C0E64F1D5B2B88A96DBB7B93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral19 behavioral20
- Target
  $PLUGINSDIR/app/documentation/ca/userGuide.html
- Size 518KB
- SHA256 07cf99d16e7db694a02c10d49479ea494281851b776a2cc2035df111f130102c
- MD5 057abef803aba88fe3282fde67316554
- SHA1 5abd940eb1b85e915cfb70e7ba96dec3e9fedca8
- SHA512 db76ac2dde8ea3a1fa64f97ef523e9bf25006bbda600632396193865fc1d7d4b97d3642ec914f9eb85e65f20323fa8b2fba224f3fd94c130ac61a6d4a16f2098
- SSDEEP 12288:TqecAexBTR7RmXLCD63r3IZKZDZMZnIO8fZ1ha/y1kURAQCZ1MjBvqfYhZ16JPOR:DVBFqfYSPhCBhLqgyGzGScdzYz
- TLSH
  T194B4732747D8FF3A44A3223EE7419967D0CB55A03326D2D1F55F09176688A88CBBB6C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral21 behavioral22
- Target
  $PLUGINSDIR/app/documentation/cs/changes.html
- Size 218KB
- SHA256 dc9d199b43240580a41050c479883d3194d1bd755ad47807871e0c1300387106
- MD5 e128944c5a84ba8b5e71e36ef723c4c8
- SHA1 6ccb93d759c89db3c0e72a79d8468624ccb1e2c2
- SHA512 2d8c484b162da2e6b6edbbc3ef42df76cfb6ff24e955b8a015b975eb4ae8ca7d98ad479f3b47d82617e590a95f49c4ae0928a9eea48f62536d13de93e3784d46
- SSDEEP 3072:4v0cbqfYAPYqb8Dffchy7C1ALP3n8hjR9:48s9yg8yMb
- TLSH
  T1F524B767D3604EBA4E0144BA618FE775F91F0254EE13F6EBC4B35086120EF3A9E67858
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral23 behavioral24
- Target
  $PLUGINSDIR/app/documentation/cs/keyCommands.html
- Size 30KB
- SHA256 2a6cbccbe58e893ee90f9c753d267241b5baabcea6e4193e23f53d6d141a45f0
- MD5 2bcd8bb7a36c070e910488eef311409d
- SHA1 9e03c7c20ee6da4eecc916856709ff23136d15f3
- SHA512 846ec46b9f20286dcbb5bddffeae9e249b8f9d5a6275a2ef305f16c5f9832bf0cd21b82c6084f5ed2bf63fff8a3e1d64c243e21bf46d3441ec64c3d1416787f9
- SSDEEP 384:NQP8JGoGGz8iSARELYH7Ou0qPIhoe7/ZrBVCcwrSndoWd1D0ynXhbj:NQO8iSWSYb9xPkoe7/n0GRbj
- TLSH
  T1A1E2DE3B57D4FC3909765039D1A98DA0F0CB637013766AE5C88F0C476762222AFB392B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral25 behavioral26
- Target
  $PLUGINSDIR/app/documentation/cs/userGuide.html
- Size 117KB
- SHA256 1cfa419d17856c62d3ee6cb886f1e06eb7559b1da4455d0765f55302cdab9c02
- MD5 c31e2c8d8c752888ba248e0dd492d1be
- SHA1 d25d76b44a1b131dbd4d7a9d0a5034ca16b988d2
- SHA512 064297edc52e6887a8a5fef4e9302a11342ceff84790fe03d5782090d18bf2a189d5eae9882864646e99ec3727e05208d79231c0ee58d9ec88a2aeb802fb0bde
- SSDEEP 1536:+KdybfiDY7aBPaY8iSWSYb9x8de7zHAeWOdlGoxi4/cyhdle:+KMbfoyIAe7dlyf
- TLSH
  T1BAC3D51F87D5EC3A09B0023DA1B9D658E59F03B0036A7AF1AC8B0D4765A2317DE7395E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral27 behavioral28
- Target
  $PLUGINSDIR/app/documentation/da/changes.html
- Size 1.1MB
- SHA256 cc888bc763947132902703baeea0daeb050cfb4eea736bb9bd4d6ed7b9b326be
- MD5 950efba2eaa810696089d11d83d7cf1b
- SHA1 364b55131cce54bf6ab95272da0b8af36f0f37b7
- SHA512 83621b2f7a52b7d5bee5a292859995695187ef1be74cff9a24e9da678afc68cb33695b9d287828eb49f77ba96b908d3f71d8336a8ba3bcb2f1882117bdbce766
- SSDEEP 12288:ouSnIwD03YGVffz7x7DQMSwI0pGY+TTpkk5:oOwD0tzhDQMG17Tpk8
- TLSH
  T1114524A6C3A15FBF8F0189BAA10EEF7AF92F0108DC52E5CFC1B25196110EF35965B548
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral29 behavioral30
- Target
  $PLUGINSDIR/app/documentation/da/keyCommands.html
- Size 120KB
- SHA256 9dbb4a7190e90a608a6c9e5feaeb945749fb806321897e670a0ebf9ece16e3b7
- MD5 6211969b7f6edde1c8100a5f041ec174
- SHA1 11dc97f761324dc2bf1958a753e8ebe5daa22547
- SHA512 c03683d1b361d00951f7e31a205970f1f506de9fda029de9d28fd72bd510f3e1fa86841c265d39d1925e8c52f0b4dde2c785074510756eb0b88f4d96842b28a6
- SSDEEP 1536:3IEHk65ZcOahsUqkhfQhU7xXxFEXR1lN3o81dMS3n:HZcOaikhohYXF6N3o81dMSX
- TLSH
  T1C0C362B356E8EE3D1836827DD101ADA1D2DFA134A37106D6C80F6E1B5B8551293FBB0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Accessibility Features

T1546.008

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Accessibility Features

T1546.008

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

A stealer written in Python and packaged with Pyinstaller

Family: blankgrabber

Checks computer location settings

Event Triggered Execution: Component Object Model Hijacking

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32