General
- Target 2026-07-20_dd7491e032167c2fb61dd253f553214e_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 15.6MB
- Sample260720-cy4j5sfs8w
- SHA256 623355cdd61ac2c5bf9bf42a098c4a6140254e0bfda4931579b0190f2e14d99d
- MD5 dd7491e032167c2fb61dd253f553214e
- SHA1 bfea412e617baf65d5edcc3ae42f5791cf6d9e7d
- SHA512 54c6642a7e6803c2e16fbd0398285d4bc2f66ed1b9848e1b17c28d462feb9973d92365933a3024cc58401d8a8fa1ac230693ecff70e212abc20e058f352a0297
- SSDEEP 393216:n8wQSOiCy+mpkskPcRnWV99k1lRyLt2V7rfm6qN:87S3Cyq5PSK/mYtIfmL
- TLSH T1ABF633D2EB9714A4D213D1754A4A0457EE52FC8C0325C1D71B6A47AAEF353EE0A7EF20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_dd7491e032167c2fb61dd253f553214e_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_dd7491e032167c2fb61dd253f553214e_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_dd7491e032167c2fb61dd253f553214e_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 15.6MB
- SHA256 623355cdd61ac2c5bf9bf42a098c4a6140254e0bfda4931579b0190f2e14d99d
- MD5 dd7491e032167c2fb61dd253f553214e
- SHA1 bfea412e617baf65d5edcc3ae42f5791cf6d9e7d
- SHA512 54c6642a7e6803c2e16fbd0398285d4bc2f66ed1b9848e1b17c28d462feb9973d92365933a3024cc58401d8a8fa1ac230693ecff70e212abc20e058f352a0297
- SSDEEP 393216:n8wQSOiCy+mpkskPcRnWV99k1lRyLt2V7rfm6qN:87S3Cyq5PSK/mYtIfmL
- TLSH T1ABF633D2EB9714A4D213D1754A4A0457EE52FC8C0325C1D71B6A47AAEF353EE0A7EF20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10A stealer written in Python and packaged with Pyinstaller
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.