General
- Target 2026-07-02_f0bb74d3437a95d87fabc4924480184c_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 21.1MB
- Sample260702-mtjdhsgs6v
- SHA256 444e9b09d0c15a0a563cc80d76b0c9f64287c78a014ad91baccdb3fd77704793
- MD5 f0bb74d3437a95d87fabc4924480184c
- SHA1 95d959657feaec5bc071a9bfafa45e64f412d584
- SHA512 e4045a384a33802c9d6303b853f21a15a1aff997d823e96deec255d920877ee60aa6f34611e3afec421a9be57ef1b28406e0e7c913e33102c08b9ad3c9dfc10c
- SSDEEP 393216:yLKlpQnNnDLGz/9mauHqnoir65y8qlkj85BePci8w4KCrD5vRP+7:yL3Kb93UqnD+oDWj85BePci7HCr3PQ
- TLSH T1D72733467E7100F8D4BBE2799906061AEBB27806437146DF52E84A672F33BE11E3EF15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-02_f0bb74d3437a95d87fabc4924480184c_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_f0bb74d3437a95d87fabc4924480184c_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_f0bb74d3437a95d87fabc4924480184c_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 21.1MB
- SHA256 444e9b09d0c15a0a563cc80d76b0c9f64287c78a014ad91baccdb3fd77704793
- MD5 f0bb74d3437a95d87fabc4924480184c
- SHA1 95d959657feaec5bc071a9bfafa45e64f412d584
- SHA512 e4045a384a33802c9d6303b853f21a15a1aff997d823e96deec255d920877ee60aa6f34611e3afec421a9be57ef1b28406e0e7c913e33102c08b9ad3c9dfc10c
- SSDEEP 393216:yLKlpQnNnDLGz/9mauHqnoir65y8qlkj85BePci8w4KCrD5vRP+7:yL3Kb93UqnD+oDWj85BePci7HCr3PQ
- TLSH T1D72733467E7100F8D4BBE2799906061AEBB27806437146DF52E84A672F33BE11E3EF15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory