General
- Target 2026-08-04_7bedb44d19c4057c706ca5253c37337e_blankgrabber_icedid_luca-stealer_njrat
- Size 71.3MB
- Sample260804-hfzfcshn4y
- SHA256 fbc636e2614a52bd8be7b65f22a6b296765e51679e8cfe944baf2b53b1c13a15
Score
10/10
Malware Config
Targets
-
- Target 2026-08-04_7bedb44d19c4057c706ca5253c37337e_blankgrabber_icedid_luca-stealer_njrat
- Size 71.3MB
- SHA256 fbc636e2614a52bd8be7b65f22a6b296765e51679e8cfe944baf2b53b1c13a15
Score10/10-
A stealer written in Python and packaged with Pyinstaller
-
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables Discord URL observed in first stage droppers
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables referencing combination of virtualization drivers
-
Detects executables referencing many IR and analysis tools
-
Detects executables referencing virtualization MAC addresses
-
Looks for VirtualBox drivers on disk
-
Looks for VirtualBox executables on disk
-
Looks for VMWare drivers on disk
-
Loads dropped DLL
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.