General
- Target 2026-07-01_5bf237846d97180d93b4b6dc61be45d3_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 9.3MB
- Sample260702-ahcelsgs4k
- SHA256 d9c9da0cab3dbd66d3d77b13b44b2937765875bcdfc65ccfd616f35809d71be6
- MD5 5bf237846d97180d93b4b6dc61be45d3
- SHA1 3dbeef21d7dc7b9ac39ec2eb8ff1e73f2eb49b3d
- SHA512 cfc7504a1896592559797f2009751ece4de9270ef5a088e796a36fda29731bc04e4ed7768a20974169d27e0508a17bbebe6f3934bf143e119d45e044a7f8cb32
- SSDEEP 196608:Yw1YkV2hFjbYhkHoqZCfyWGFlgLNotR2+4Gcwojv9sxcwAPubx:Z9+tbYhkHBZCfyWHLNotR0B9sxc121
- TLSH T112A63384B3E890E7E59F46F895153B01E3A0FC25276095FB62B1A897BF33BE05D36211
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_5bf237846d97180d93b4b6dc61be45d3_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_5bf237846d97180d93b4b6dc61be45d3_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_5bf237846d97180d93b4b6dc61be45d3_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 9.3MB
- SHA256 d9c9da0cab3dbd66d3d77b13b44b2937765875bcdfc65ccfd616f35809d71be6
- MD5 5bf237846d97180d93b4b6dc61be45d3
- SHA1 3dbeef21d7dc7b9ac39ec2eb8ff1e73f2eb49b3d
- SHA512 cfc7504a1896592559797f2009751ece4de9270ef5a088e796a36fda29731bc04e4ed7768a20974169d27e0508a17bbebe6f3934bf143e119d45e044a7f8cb32
- SSDEEP 196608:Yw1YkV2hFjbYhkHoqZCfyWGFlgLNotR2+4Gcwojv9sxcwAPubx:Z9+tbYhkHBZCfyWHLNotR0B9sxc121
- TLSH T112A63384B3E890E7E59F46F895153B01E3A0FC25276095FB62B1A897BF33BE05D36211
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Loads dropped DLL