Overview

overview

7

Static

static

3

2026-07-02...om.exe

windows10-2004-x64

7

2026-07-02...om.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    141s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260630-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/07/2026, 08:40

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-02_efda43d3f27b7bf49522841703883b81_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom.exe
  • Size 18.5MB
  • Sample260702-kk8wpsex71
  • SHA256 af3c7ed3a23e0195919993b4da61d65476a93f95473e433fff9e81fcc14eef99
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 25 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-02_efda43d3f27b7bf49522841703883b81_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-02_efda43d3f27b7bf49522841703883b81_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4748
    • C:\Users\Admin\AppData\Local\Temp\2026-07-02_efda43d3f27b7bf49522841703883b81_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom.exe
      C:\Users\Admin\AppData\Local\Temp\2026-07-02_efda43d3f27b7bf49522841703883b81_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom.exe
      2⤵
      • Loads dropped DLL
      PID:6012

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _asyncio.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\_asyncio.pyd
        • Size 76KB
        • SHA256 cc27a21453b309197030b5fa8051a8a9c89aec79f9b81ee4ea2a2551ac0f912f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\_bz2.pyd
        • Size 86KB
        • SHA256 ef5277eb670219274e7d1e92190ddf7f4bb94d4922ca1c1a12efadfd2c4c66f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\_ctypes.pyd
        • Size 139KB
        • SHA256 fd4847b99cd504a66bdc4739f15181b562774e6736bb88775880b073276dede1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _decimal.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\_decimal.pyd
        • Size 283KB
        • SHA256 1ee2247153ec6c6e5b3b49402f294b2b7325385ad489a5522e6fa9b406575e8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\_hashlib.pyd
        • Size 67KB
        • SHA256 9bc6ffcd2ab4ac87c4035f18b432e888d0d4a36795c97bf3f28ddf32cc34e40f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\_lzma.pyd
        • Size 157KB
        • SHA256 39e5bc3624a26c9f6ad2e2df412543b0bd697a1d75338b44fe99763358d6d8cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _overlapped.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\_overlapped.pyd
        • Size 56KB
        • SHA256 0e8b684fdcc8c6de88bd4b92b6ed44a6fd917949c98b0691285e0cf6c760dc36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\_socket.pyd
        • Size 85KB
        • SHA256 65caaa6f35c329d901ba3f3d9f7fc4d7443dcde89907dccbd6748786cc517476
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\_ssl.pyd
        • Size 180KB
        • SHA256 12e31f50739e33b115c7e10febf1ccedeb5d9353cd539c608cc5dd164bee17a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _uuid.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\_uuid.pyd
        • Size 27KB
        • SHA256 635d6c46bbf6b86dd30a802bd1c6e214dabccb44d1452c52f0b557ae5bcc6f68
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\_wmi.pyd
        • Size 39KB
        • SHA256 6fb2c6316628664319b2abcf961f0cbbac809966a65b653c86e7864ad8701496
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _zstd.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\_zstd.pyd
        • Size 491KB
        • SHA256 54e6acfbc1cb27c9afea0e133cadac68b89869ff1a14eb0c678d40eb9c655347
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        emoji.json
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\emoji\unicode_codes\emoji.json
        • Size 517KB
        • SHA256 22d517783333d56d873e67c2869ed29344e5f775a068320c4a60b4d3b88eb5a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        grapheme_break_property.json
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\grapheme\data\grapheme_break_property.json
        • Size 43KB
        • SHA256 b5dbbc33a0f6a506949efff3654b4fd6d909b07c03084a858a429d8d7c126b14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 8b27ebae75cc99f20075322446af36c9ffcb4e3b400a77d712ef43f007f47f7d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\libssl-3.dll
        • Size 776KB
        • SHA256 56dd50fb903b860ace831d0cd6c6250cd57e8655867c3a0fa16eac2d4cc0ba0b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        main.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\main.dll
        • Size 41.7MB
        • SHA256 2741c7de60251bd51836afe59b2dccb472886fabde27673de3091f707d44b570
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _speedups.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\markupsafe\_speedups.pyd
        • Size 13KB
        • SHA256 6333da2f431abb0d75a6488ff457efb7bc9e33b6afc1ce5ad48475fce2ef5838
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python314.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\python314.dll
        • Size 6.5MB
        • SHA256 18310593c50ad109fc5c95db1fd5c92ecec9e1bfc66c976df9fc11dd62616d5a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\select.pyd
        • Size 32KB
        • SHA256 8c3ee20776d8eb7c441f2006ed46b9ba932060c6b66df4c1e156dcf7738d56ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\unicodedata.pyd
        • Size 740KB
        • SHA256 a7a2bfeed5d0480d8c458b3a61ee32c478ae10c694e8be61c3ba0e8cc2a6e1c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vcruntime140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\vcruntime140_1.dll
        • Size 48KB
        • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        speedups.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\websockets\speedups.pyd
        • Size 11KB
        • SHA256 97297d94ac8affd34831ef5cc4fd9abaebc4388097251a2a8e6b336f9158572e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _wrappers.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4748_838988_DnUE2XgYCm8\wrapt\_wrappers.pyd
        • Size 50KB
        • SHA256 bb125744b4611f7965bd9880d1c5208da06785018809d8f0ea4fca6cc477e88a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download