General
- Target 2026-07-23_62000909f609e0d9cafe80b44fee9444_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 18.4MB
- Sample260723-d9k3lsdm8w
- SHA256 1e7bed50f2b94bbabd7f3d686f9909597ddbed7c6e0f179852d5bf75002a81cd
- MD5 62000909f609e0d9cafe80b44fee9444
- SHA1 8eccf6866823ea768b4ddc286b453b3fe97ab20a
- SHA512 10c609f190a9957c5b8c819a6ca772359fc18db7d7c69f99990bd15d347ea5adbcccc1d37fd4301949646b52231349756a1282196f3ea20fc8ef80105030f8cd
- SSDEEP 393216:RUqmGA05X/AxYSyoiTTW5RjDlG6WtADWEnrRrKMkvvTIqg2FJX7777:RUqmGl1LddTTARjL/WANrKFN
- TLSH T15B173349A114C3ECDC354479FC4B468267697C3E8F26C597AB2AB2FA0FBD4B40837661
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_62000909f609e0d9cafe80b44fee9444_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_62000909f609e0d9cafe80b44fee9444_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_62000909f609e0d9cafe80b44fee9444_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 18.4MB
- SHA256 1e7bed50f2b94bbabd7f3d686f9909597ddbed7c6e0f179852d5bf75002a81cd
- MD5 62000909f609e0d9cafe80b44fee9444
- SHA1 8eccf6866823ea768b4ddc286b453b3fe97ab20a
- SHA512 10c609f190a9957c5b8c819a6ca772359fc18db7d7c69f99990bd15d347ea5adbcccc1d37fd4301949646b52231349756a1282196f3ea20fc8ef80105030f8cd
- SSDEEP 393216:RUqmGA05X/AxYSyoiTTW5RjDlG6WtADWEnrRrKMkvvTIqg2FJX7777:RUqmGl1LddTTARjL/WANrKFN
- TLSH T15B173349A114C3ECDC354479FC4B468267697C3E8F26C597AB2AB2FA0FBD4B40837661
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
A stealer written in Python and packaged with Pyinstaller
-
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Detects executables using Telegram Chat Bot
-
Loads dropped DLL