General
- Target 2026-08-06_4b3cf2f64ffc34d1763e8f22fcb9c0b2_blankgrabber_cobalt-strike_dosia_icedid_luca-stealer_njrat_quasar-rat_satacom_vidar
- Size 40.6MB
- Sample260806-j951nsxale
- SHA256 284a28188e630a90106af792ead18c6cb4a3a559713bbfd72200f07cd9a3351f
- MD5 4b3cf2f64ffc34d1763e8f22fcb9c0b2
- SHA1 4828330b18075387c3ab250e687bbc13f48c275b
- SHA512 ffcef53c72139b2f454994b3556f5aa86dd6454e185173a6a8f173f82e0c39b9a4ef2180c39af1f726c645d78409fadb1a1e8ac557fca538db92d3ef4405dd2f
- SSDEEP 786432:G3VRMjzKzKMC8C0VtQrGrHBrDarIbtjSs5eWn+vtUXIqQYdkFrGmSsMffC:sVGDatQrQtOrctjvz+qXIFak0gMf
- TLSH T1D797330438A349FCDBB79175886796A0E2A78E6D02109CD3454CB5E6FA6B5F1CF3062F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_4b3cf2f64ffc34d1763e8f22fcb9c0b2_blankgrabber_cobalt-strike_dosia_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_4b3cf2f64ffc34d1763e8f22fcb9c0b2_blankgrabber_cobalt-strike_dosia_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_4b3cf2f64ffc34d1763e8f22fcb9c0b2_blankgrabber_cobalt-strike_dosia_icedid_luca-stealer_njrat_quasar-rat_satacom_vidar
- Size 40.6MB
- SHA256 284a28188e630a90106af792ead18c6cb4a3a559713bbfd72200f07cd9a3351f
- MD5 4b3cf2f64ffc34d1763e8f22fcb9c0b2
- SHA1 4828330b18075387c3ab250e687bbc13f48c275b
- SHA512 ffcef53c72139b2f454994b3556f5aa86dd6454e185173a6a8f173f82e0c39b9a4ef2180c39af1f726c645d78409fadb1a1e8ac557fca538db92d3ef4405dd2f
- SSDEEP 786432:G3VRMjzKzKMC8C0VtQrGrHBrDarIbtjSs5eWn+vtUXIqQYdkFrGmSsMffC:sVGDatQrQtOrctjvz+qXIFak0gMf
- TLSH T1D797330438A349FCDBB79175886796A0E2A78E6D02109CD3454CB5E6FA6B5F1CF3062F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
A stealer written in Python and packaged with Pyinstaller
-
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
-
Detects Windows executables referencing non-Windows User-Agents
-
Detects executables containing URLs to raw contents of a Github gist
-
Loads dropped DLL