General
- Target 2026-05-28_9f55b977e0d24554fec09e52c0d3457f_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom
- Size 1.6MB
- Sample260528-wsh6ssh19y
- SHA256 c82a875a0ee65d52f62cf3d5f7c7aee739d5b94e4053beb896e8796a03830674
- MD5 9f55b977e0d24554fec09e52c0d3457f
- SHA1 1ffe8b734bcf9fc7c1cdac01b8e8ef69bc15dd48
- SHA512 7e2f4ec7bbb91b837763556514c30ee1353c250b1ea691fcf42c4fabaa72d50729bff4aa6b792e063fdb82c740ab86b1026751c9167b89cd8ed04f9c338d4184
- SSDEEP 24576:wxLZKAyt5tmx1Y51t05ZtP7gQA+YXIySn46BKuK5XaMsG0TM2jlX6cL:UByHh51t0jaBm4MKuK5Xaksjl
- TLSH T1D675024AA3A451FCE1BBC178C992450ADB71FC250B70AADF17945AA71F23BE05E3D321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-28_9f55b977e0d24554fec09e52c0d3457f_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-28_9f55b977e0d24554fec09e52c0d3457f_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
Resource
win11-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-28_9f55b977e0d24554fec09e52c0d3457f_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom
- Size 1.6MB
- SHA256 c82a875a0ee65d52f62cf3d5f7c7aee739d5b94e4053beb896e8796a03830674
- MD5 9f55b977e0d24554fec09e52c0d3457f
- SHA1 1ffe8b734bcf9fc7c1cdac01b8e8ef69bc15dd48
- SHA512 7e2f4ec7bbb91b837763556514c30ee1353c250b1ea691fcf42c4fabaa72d50729bff4aa6b792e063fdb82c740ab86b1026751c9167b89cd8ed04f9c338d4184
- SSDEEP 24576:wxLZKAyt5tmx1Y51t05ZtP7gQA+YXIySn46BKuK5XaMsG0TM2jlX6cL:UByHh51t0jaBm4MKuK5Xaksjl
- TLSH T1D675024AA3A451FCE1BBC178C992450ADB71FC250B70AADF17945AA71F23BE05E3D321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.