Overview

overview

6

Static

static

3

2026-06-04...om.exe

windows10-2004-x64

6

2026-06-04...om.exe

windows11-21h2-x64

6

Analysis

  • max time kernel
    149s
  • max time network
    144s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    04/06/2026, 10:50

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-06-04_f23ef080544ac5e45a32469d6ecde3da_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
  • Size 1.6MB
  • Sample260604-mw8fesdx7n
  • SHA256 a177d5b3e7d6823081fa79b201f510ac9a8b8f9c13afde6c312ed770c1b11468
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-06-04_f23ef080544ac5e45a32469d6ecde3da_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-06-04_f23ef080544ac5e45a32469d6ecde3da_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:424
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      2⤵
        PID:2400
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
        2⤵
          PID:5468
      • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
        1⤵
          PID:4912
        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
          1⤵
            PID:772
          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
            1⤵
              PID:4728
            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
              1⤵
                PID:1880

              Network

                    MITRE ATT&CK Matrix

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    cookies.json
                    • Path C:\Users\Admin\AppData\Local\cUWThx\Chrome\Default\cookies.json
                    • Size 342B
                    • SHA256 c050b601400b6239a46cf622bda9e709f566678aceffaeb7f93806c1bff8755f
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    cookies.txt
                    • Path C:\Users\Admin\AppData\Local\cUWThx\Chrome\Default\cookies.txt
                    • Size 254B
                    • SHA256 95f4f32e9948a58a2dd5dbc51bd8b6de55efd448f0b9b3f04ba96e4ffe3f8a41
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    fingerprint.json
                    • Path C:\Users\Admin\AppData\Local\cUWThx\Chrome\fingerprint.json
                    • Size 970B
                    • SHA256 a25599618500faaf977669ffc1a6a0cc81b1a197de7ba6d07810455a26f2f43d
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    cookies.json
                    • Path C:\Users\Admin\AppData\Local\cUWThx\Edge\Default\cookies.json
                    • Size 344B
                    • SHA256 c074167e47410f2d040f2211b324a601f7d618b359a5441b73b4b2de52500a67
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    cookies.txt
                    • Path C:\Users\Admin\AppData\Local\cUWThx\Edge\Default\cookies.txt
                    • Size 256B
                    • SHA256 d81450745667f44a79211be4a12df835e78b86feb9c29dd7c50b7e02ba110af1
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    fingerprint.json
                    • Path C:\Users\Admin\AppData\Local\cUWThx\Edge\fingerprint.json
                    • Size 969B
                    • SHA256 9fd02ae8d28f6317ce75aaed47a28469284758c21e0f5dde4cf6a5b90f299405
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download