General
- Target 2026-07-15_7aea51c8ec137dc2812484172f2a8624_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 45.0MB
- Sample260715-c3webshz8m
- SHA256 2d5f82a3b8b15ee8eeef2a5bf12f999b8ecb021d8b64b5b81dab945b717c80a8
- MD5 7aea51c8ec137dc2812484172f2a8624
- SHA1 12659eb4020b8fa9a9003d797736779ac046104c
- SHA512 d96b8ed35c366704db55cee9ed142f71c7b8868c56d3e58ce3b9f4feee44e4b2bca63d92781a9b3946442335177b92c806374a20694c7c9c42893ba3abc2ea62
- SSDEEP 786432:QkokVPeFNSiG771vfZOe/bdgUpduTGCOMRj3r/3FbaHsXXDhNrT1id0s45:v/VINZG771J1Zb6TvVkHsXXFNv1u4
- TLSH T105A733D4ADF97768C4BF57387860E4ACB187792F8A608C6F915AD7AB0FE20C01178947
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_7aea51c8ec137dc2812484172f2a8624_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_7aea51c8ec137dc2812484172f2a8624_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_7aea51c8ec137dc2812484172f2a8624_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 45.0MB
- SHA256 2d5f82a3b8b15ee8eeef2a5bf12f999b8ecb021d8b64b5b81dab945b717c80a8
- MD5 7aea51c8ec137dc2812484172f2a8624
- SHA1 12659eb4020b8fa9a9003d797736779ac046104c
- SHA512 d96b8ed35c366704db55cee9ed142f71c7b8868c56d3e58ce3b9f4feee44e4b2bca63d92781a9b3946442335177b92c806374a20694c7c9c42893ba3abc2ea62
- SSDEEP 786432:QkokVPeFNSiG771vfZOe/bdgUpduTGCOMRj3r/3FbaHsXXDhNrT1id0s45:v/VINZG771J1Zb6TvVkHsXXFNv1u4
- TLSH T105A733D4ADF97768C4BF57387860E4ACB187792F8A608C6F915AD7AB0FE20C01178947
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10A stealer written in Python and packaged with Pyinstaller
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
- Custom signature
Detects executables (downlaoders) containing URLs to raw contents of a paste
- Custom signature
Detects executables containing URLs to raw contents of a Github gist
- Custom signature
Detects executables containing commands for clearing Windows Event Logs
Loads dropped DLL