General
- Target 2026-07-18_b919d45022fea04b4198472f2abe3b54_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 15.1MB
- Sample260718-3qnrtsft8n
- SHA256 a2f825cdc634f6defbc0520a0799fad5d0f830048af9f7f0f9ecf6f34dd5fbcf
Score
10/10
Malware Config
Targets
-
- Target 2026-07-18_b919d45022fea04b4198472f2abe3b54_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 15.1MB
- SHA256 a2f825cdc634f6defbc0520a0799fad5d0f830048af9f7f0f9ecf6f34dd5fbcf
Score10/10A stealer written in Python and packaged with Pyinstaller
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
- Custom signature
Detects executables containing URLs to raw contents of a Github gist
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
Loads dropped DLL
Checks whether UAC is enabled
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Hide Artifacts: Hidden Window
Windows that would typically be displayed when an application carries out an operation can be hidden.
Network Share Discovery
Attempt to gather information on host network.