General
- Target https://cdn.discordapp.com/attachments/1349391705316524074/1532912180440076509/danger23.exe?ex=6a6e9337&is=6a6d41b7&hm=1b21e2512e45a3c521e58ad87b0238f6ba9d99a3f503d8033654133adab62e78&
- Sample260801-a4vs3sbb45
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://cdn.discordapp.com/attachments/1349391705316524074/1532912180440076509/danger23.exe?ex=6a6e9337&is=6a6d41b7&hm=1b21e2512e45a3c521e58ad87b0238f6ba9d99a3f503d8033654133adab62e78&
Resource
win10ltsc2021-20260513-en
22 signatures
150 seconds
Behavioral task
behavioral2
Sample
https://cdn.discordapp.com/attachments/1349391705316524074/1532912180440076509/danger23.exe?ex=6a6e9337&is=6a6d41b7&hm=1b21e2512e45a3c521e58ad87b0238f6ba9d99a3f503d8033654133adab62e78&
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target https://cdn.discordapp.com/attachments/1349391705316524074/1532912180440076509/danger23.exe?ex=6a6e9337&is=6a6d41b7&hm=1b21e2512e45a3c521e58ad87b0238f6ba9d99a3f503d8033654133adab62e78&
-
A stealer written in Python and packaged with Pyinstaller
-
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL