blankgrabber | 4ba0c56f6d35b5cf40958b71ca22879bc9883887531bcb66c9ef72030b975a90

General

Target
Velostrap-Velorin.zip
Size 15.2MB
Sample260730-16cndsyape
SHA256 4ba0c56f6d35b5cf40958b71ca22879bc9883887531bcb66c9ef72030b975a90
MD5 c3fb4d37ba78d63ce102eaba5a1f64aa
SHA1 fcdc3d68f1da131f67bd0a4b15ae548551520ca0
SHA512 bcc85f27de2dd856465126f76e5f74d9f8940b268c805b067f450725a2a85ba663d452d27b8818217e559bc6084b73b6e0cf6e3fa6c5db66d40562f2c872496c
SSDEEP 393216:Uifi7Zbljub47UHNgg3u4eWkFT72aX1RpCyl1/SmO:Uif0lCU7Uag+4eWkFX1ayl1qT
TLSH
T1CEF633A97531F404E5C9B1E5FD8A48014EA1E4D0CDD1EB31224BA0B55A0AFEFDFBC986
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  Velostrap/Velostrap.exe
- Size 15.3MB
- SHA256 624162f54023fce6a1ae7dd776c864d3cfbdb0808e3e8b17259123f935f86d6a
- MD5 4d25a3becbaa787d840f43b82e14a516
- SHA1 62d4db20f743156efd0ed19fed0ebd63c8eeb8d4
- SHA512 b2ccef2377a7215c6b679c83e804b3fc343e9544ebb27172350f6c81d8f0b2e9443bb9c9467a31285732b0ff89762d1432d0ab408e0a5e320ca4856429aab736
- SSDEEP 393216:JMztzZBLjOtG/lTTUnBe+NI0ix69Pryq1nOPE+oLpa+q:JMzZLC0/lEBbNI3ch1nH+oL4d
- TLSH
  T18EF63377FA23F40CD2CBB2B0EE8A08E15E71FCE04960993511C9A1776703F9ADE58656
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery execution blankgrabber stealer trojan
- A stealer written in Python and packaged with Pyinstaller
- Family: blankgrabber
  Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
  stealer blankgrabber
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1
- Target
  Velostrap/memory.dll
- Size 12KB
- SHA256 bc6d7a8b9159ec41817848d5d9cca5d2c681923ae4a3d42b3dc0b66046545839
- MD5 8f15089e46ce81cb29111f5288ae7eb9
- SHA1 50c0493fbf702f8eb4edd8e2d7896082a9ba817e
- SHA512 7e92b843320957019770a82e81b7eb22ccc08d1de229b769746c8f3c98594cacc4374ece1e6c9fedfc27c0fdcbfe7e2ca6b4c470afea9c4cd886d742901a92ff
- SSDEEP 96:skwA3vNaIvfCPol/EI5wMBUpErxeWrx2JLErJoCIabK+43K1IJxRUUBgVociuOjQ:skwA3bcolcLMWsbSzaV1IJxKUBge7Vj
- TLSH
  T1C0420985FA648AB9D45682B4C8370B18B1B4B6202B427BCF0336910A1E737C1727F7D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2