General
- Target 2026-07-20_e6abd149d065688d28dbcd6c723b53ef_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 28.4MB
- Sample260720-elca8shs7w
- SHA256 5e03aa7a660f59bfc3937d76b0e1361846fccdd5c4539ee1857b09f53898fefb
- MD5 e6abd149d065688d28dbcd6c723b53ef
- SHA1 cae9ddc542e83a81034083add7a0a86399176fab
- SHA512 c9332cf2476217752bc47beb850c599ffece87f9c9aa59242a5c61b68c57e09c902440cd165b5c05d5ca904a88414bcca58d2d968f574e1a37a3e515faed22b3
- SSDEEP 786432:onwjP9Dg9aiuIlWN8Up5vnt+hxfhrN+3+:oo9DgNuIlfe4fZNO+
- TLSH T1B75733D8B54413EDD49BF17950129B0BBA51A8B0D7414BC3A396B2728F3B5F183B3B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_e6abd149d065688d28dbcd6c723b53ef_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_e6abd149d065688d28dbcd6c723b53ef_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_e6abd149d065688d28dbcd6c723b53ef_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 28.4MB
- SHA256 5e03aa7a660f59bfc3937d76b0e1361846fccdd5c4539ee1857b09f53898fefb
- MD5 e6abd149d065688d28dbcd6c723b53ef
- SHA1 cae9ddc542e83a81034083add7a0a86399176fab
- SHA512 c9332cf2476217752bc47beb850c599ffece87f9c9aa59242a5c61b68c57e09c902440cd165b5c05d5ca904a88414bcca58d2d968f574e1a37a3e515faed22b3
- SSDEEP 786432:onwjP9Dg9aiuIlWN8Up5vnt+hxfhrN+3+:oo9DgNuIlfe4fZNO+
- TLSH T1B75733D8B54413EDD49BF17950129B0BBA51A8B0D7414BC3A396B2728F3B5F183B3B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
A stealer written in Python and packaged with Pyinstaller
-
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
-
Detects Windows executables referencing non-Windows User-Agents
-
Detects executables containing URLs to raw contents of a Github gist
-
Loads dropped DLL