General
- Target 2026-07-03_51bb974bb1bf63690a2df06bf8aa2867_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom
- Size 37.8MB
- Sample260703-pt8draht8v
- SHA256 3d20c14598d511ef1b80b9b5d382109d2f474d249b96a6c81d5768cb57ca396b
- MD5 51bb974bb1bf63690a2df06bf8aa2867
- SHA1 bc4ae2c9b00428e9ca3988af5e35f3458ed3d5e6
- SHA512 cf746f1e897ca6edb12f7fe04395c350174e4a4759995b9e177c955e0ae3e029b348c4ce8ad0edca51fb9a0acd59dbe0a3f42230fdd858395e7c00bea7a13beb
- SSDEEP 786432:62sf4BBuLtYUjpuLq7fLDOesBc2vsPj7gXM29h:lYLtYUjpxHfosr7U9h
- TLSH T1AF973340C5A145F2F90B92BA8CDD0255CBC1783473AA28DB3A67D357F93A0997739B0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_51bb974bb1bf63690a2df06bf8aa2867_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_51bb974bb1bf63690a2df06bf8aa2867_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_51bb974bb1bf63690a2df06bf8aa2867_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom
- Size 37.8MB
- SHA256 3d20c14598d511ef1b80b9b5d382109d2f474d249b96a6c81d5768cb57ca396b
- MD5 51bb974bb1bf63690a2df06bf8aa2867
- SHA1 bc4ae2c9b00428e9ca3988af5e35f3458ed3d5e6
- SHA512 cf746f1e897ca6edb12f7fe04395c350174e4a4759995b9e177c955e0ae3e029b348c4ce8ad0edca51fb9a0acd59dbe0a3f42230fdd858395e7c00bea7a13beb
- SSDEEP 786432:62sf4BBuLtYUjpuLq7fLDOesBc2vsPj7gXM29h:lYLtYUjpxHfosr7U9h
- TLSH T1AF973340C5A145F2F90B92BA8CDD0255CBC1783473AA28DB3A67D357F93A0997739B0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.