General
- Target 2026-06-04_f23ef080544ac5e45a32469d6ecde3da_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom
- Size 1.6MB
- Sample260604-mw8fesdx7n
- SHA256 a177d5b3e7d6823081fa79b201f510ac9a8b8f9c13afde6c312ed770c1b11468
- MD5 f23ef080544ac5e45a32469d6ecde3da
- SHA1 084cd1a0b1f74184946cea6e40671fddaa41d3c0
- SHA512 0e53058d110fb50129e7b6643f80574134dcbab5e4ae617f4622be54e666c273b8c9af4e7f8fda3b20c461eb94f0f4926659116d6f5ef3c46be04b61096a230f
- SSDEEP 24576:YGJtfFYI+BNK9SiLA5syFJDZJrJGuhaXt/huuzFOfYFGhN+rQG1H1eXuR4zkY:Z3FYpIS5syFrJdGLXtss8N+rdTetk
- TLSH T19075024BA3A451FDE1BBC174C992450BEB71F8690B6096DF17948A562F23AF04F3E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_f23ef080544ac5e45a32469d6ecde3da_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_f23ef080544ac5e45a32469d6ecde3da_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
Resource
win11-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_f23ef080544ac5e45a32469d6ecde3da_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom
- Size 1.6MB
- SHA256 a177d5b3e7d6823081fa79b201f510ac9a8b8f9c13afde6c312ed770c1b11468
- MD5 f23ef080544ac5e45a32469d6ecde3da
- SHA1 084cd1a0b1f74184946cea6e40671fddaa41d3c0
- SHA512 0e53058d110fb50129e7b6643f80574134dcbab5e4ae617f4622be54e666c273b8c9af4e7f8fda3b20c461eb94f0f4926659116d6f5ef3c46be04b61096a230f
- SSDEEP 24576:YGJtfFYI+BNK9SiLA5syFJDZJrJGuhaXt/huuzFOfYFGhN+rQG1H1eXuR4zkY:Z3FYpIS5syFrJdGLXtss8N+rdTetk
- TLSH T19075024BA3A451FDE1BBC174C992450BEB71F8690B6096DF17948A562F23AF04F3E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.