General
- Target 2026-08-03_16192a418327b9db3a49338167203bd7_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 37.0MB
- Sample260803-dftgwsbl2v
- SHA256 47f7546afad4973c2abc9e2ea4e79626092827fc6c3ca102336046a5844cfad3
- MD5 16192a418327b9db3a49338167203bd7
- SHA1 0403ce6fda6110c822c8a6a71c43a7929a109317
- SHA512 1cda8fc58cec55a03818982b33d77cc72d2828fc73d2dc396a44c92dd2fda0ca36d72a35bf5dd541e459a6f2842558707ef562e5e25b80bca4c4c0c9013e8156
- SSDEEP 786432:q/64Y7EJifeBpiYDl9Q2fgg4IRe10c+OcLiRIQrMyVzxJ:7GifePF+Bg4UeT+jiBXVVJ
- TLSH T16887334D1B92DE4FD12AB3325822FF3889D568D8B7020AD7D13BB1D86D235DA6DA35C0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_16192a418327b9db3a49338167203bd7_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_16192a418327b9db3a49338167203bd7_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_16192a418327b9db3a49338167203bd7_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 37.0MB
- SHA256 47f7546afad4973c2abc9e2ea4e79626092827fc6c3ca102336046a5844cfad3
- MD5 16192a418327b9db3a49338167203bd7
- SHA1 0403ce6fda6110c822c8a6a71c43a7929a109317
- SHA512 1cda8fc58cec55a03818982b33d77cc72d2828fc73d2dc396a44c92dd2fda0ca36d72a35bf5dd541e459a6f2842558707ef562e5e25b80bca4c4c0c9013e8156
- SSDEEP 786432:q/64Y7EJifeBpiYDl9Q2fgg4IRe10c+OcLiRIQrMyVzxJ:7GifePF+Bg4UeT+jiBXVVJ
- TLSH T16887334D1B92DE4FD12AB3325822FF3889D568D8B7020AD7D13BB1D86D235DA6DA35C0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
A stealer written in Python and packaged with Pyinstaller
-
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
-
Detects executables containing URLs to raw contents of a Github gist
-
Loads dropped DLL