General
- Target 2026-07-08_cb72fe5da07b8e3190696366c7a1d0ea_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar
- Size 12.2MB
- Sample260708-kagpgads2z
- SHA256 1456997eb9781c0ed8a51820a4b84e47e9696661b09e80c443127477f21569bc
- MD5 cb72fe5da07b8e3190696366c7a1d0ea
- SHA1 c017b64005e0f88a91f8aff87df0c52edf8cb5e6
- SHA512 bb9e8fcd2b7828f9abce18b5df6c4b24cd5a24ee1a6e6d18080b917267e0baf64e60f15394fea3d14d4c62e4f36adff3383672ec27e2e9769a786af2199d6316
- SSDEEP 98304:YuBaR7bSiWvlBLwZ1aKMuD/DA0dZ7jzFzkpSODPcy1DQq/b3EvuKBPwox8WLOEJ1:YtuLwZS8xXoHPzkueNLXt8FfKW7X
- TLSH T169D68D8A62F901D4D1E6D079C60E954BE7B27C5103708BEF01659ABA5F376E38E3B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_cb72fe5da07b8e3190696366c7a1d0ea_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_cb72fe5da07b8e3190696366c7a1d0ea_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar
- Size 12.2MB
- SHA256 1456997eb9781c0ed8a51820a4b84e47e9696661b09e80c443127477f21569bc
- MD5 cb72fe5da07b8e3190696366c7a1d0ea
- SHA1 c017b64005e0f88a91f8aff87df0c52edf8cb5e6
- SHA512 bb9e8fcd2b7828f9abce18b5df6c4b24cd5a24ee1a6e6d18080b917267e0baf64e60f15394fea3d14d4c62e4f36adff3383672ec27e2e9769a786af2199d6316
- SSDEEP 98304:YuBaR7bSiWvlBLwZ1aKMuD/DA0dZ7jzFzkpSODPcy1DQq/b3EvuKBPwox8WLOEJ1:YtuLwZS8xXoHPzkueNLXt8FfKW7X
- TLSH T169D68D8A62F901D4D1E6D079C60E954BE7B27C5103708BEF01659ABA5F376E38E3B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1