General
- Target 2026-07-19_3224618a4e2fe1c695fec006110ec8fa_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 24.4MB
- Sample260719-yca7csat3k
- SHA256 812965eeefdaaf7904f942dba378658eb1acb1f7686b807bbfa23fafbd8b3c58
- MD5 3224618a4e2fe1c695fec006110ec8fa
- SHA1 3d6948b72722bc5081d2491220ec29a19a9843e9
- SHA512 7bead7106a44b912ba7e360f569cf7b7103c27fc23d18538cfa1adda1d64e3cb65afe7b559f99ea9c02daa026e263323ce4560e424928dcf8d89e96232f17838
- SSDEEP 786432:xF28S7upz6lAusBLbNJZNBVvuVyzPx0h0:xs17uclAusRZNLv2yzKh
- TLSH T1A0473345E3618CFAF25550BD595ADAB062AA7CA92750D2D713F038BB7F32DE00A3DB40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_3224618a4e2fe1c695fec006110ec8fa_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_3224618a4e2fe1c695fec006110ec8fa_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_3224618a4e2fe1c695fec006110ec8fa_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 24.4MB
- SHA256 812965eeefdaaf7904f942dba378658eb1acb1f7686b807bbfa23fafbd8b3c58
- MD5 3224618a4e2fe1c695fec006110ec8fa
- SHA1 3d6948b72722bc5081d2491220ec29a19a9843e9
- SHA512 7bead7106a44b912ba7e360f569cf7b7103c27fc23d18538cfa1adda1d64e3cb65afe7b559f99ea9c02daa026e263323ce4560e424928dcf8d89e96232f17838
- SSDEEP 786432:xF28S7upz6lAusBLbNJZNBVvuVyzPx0h0:xs17uclAusRZNLv2yzKh
- TLSH T1A0473345E3618CFAF25550BD595ADAB062AA7CA92750D2D713F038BB7F32DE00A3DB40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
A stealer written in Python and packaged with Pyinstaller
-
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.