General
- Target 2026-07-20_7603d4416344594fd6b2721943682bd0_akira_cobalt-strike_coinminer_emotet_glassworm_icedid_pos_vidar
- Size 42.6MB
- Sample260720-lkrg4ads8q
- SHA256 ee342662d74b3537534fe3920d4b4e3906c1964d9068cf34eac73ed5416fcb60
- MD5 7603d4416344594fd6b2721943682bd0
- SHA1 6831ebeaa97b57976af2cdf0889779b9b2ab10c8
- SHA512 68826b56e51940b851c569ca672d11a981741d326cc734d1b27bca434c837fc3253648c59a487f77039002d78b7d86e1bf011dfc9dbb1f1832f60cd095698ad7
- SSDEEP 786432:oVT3L6iuF1c0G2DErvW4Rr0ftPMfZYZAa345De:owiuF42DErsZAyqDe
- TLSH T173A76B53E2B10099E97AE0B886575623EA71BC0C0734BAEB9590FA752F32FE1577C704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-20_7603d4416344594fd6b2721943682bd0_akira_cobalt-strike_coinminer_emotet_glassworm_icedid_pos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_7603d4416344594fd6b2721943682bd0_akira_cobalt-strike_coinminer_emotet_glassworm_icedid_pos_vidar.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_7603d4416344594fd6b2721943682bd0_akira_cobalt-strike_coinminer_emotet_glassworm_icedid_pos_vidar
- Size 42.6MB
- SHA256 ee342662d74b3537534fe3920d4b4e3906c1964d9068cf34eac73ed5416fcb60
- MD5 7603d4416344594fd6b2721943682bd0
- SHA1 6831ebeaa97b57976af2cdf0889779b9b2ab10c8
- SHA512 68826b56e51940b851c569ca672d11a981741d326cc734d1b27bca434c837fc3253648c59a487f77039002d78b7d86e1bf011dfc9dbb1f1832f60cd095698ad7
- SSDEEP 786432:oVT3L6iuF1c0G2DErvW4Rr0ftPMfZYZAa345De:owiuF42DErsZAyqDe
- TLSH T173A76B53E2B10099E97AE0B886575623EA71BC0C0734BAEB9590FA752F32FE1577C704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10A stealer written in Python and packaged with Pyinstaller
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
- Custom signature
Detects Windows executables referencing non-Windows User-Agents
- Custom signature
Detects executables containing URLs to raw contents of a Github gist
- Custom signature
Detects executables referencing virtualization MAC addresses
Loads dropped DLL