d3da9c383438c6cc6f61d53431c67f8dbf6cd472f44ecd0ba30b17b0bea443f4

General

Target
2026-07-09_f198406d085b0316094e5711c349c0e0_blankgrabber_cobalt-strike_icedid_njrat_satacom
Size 57.7MB
Sample260709-xdfykagy3y
SHA256 d3da9c383438c6cc6f61d53431c67f8dbf6cd472f44ecd0ba30b17b0bea443f4
MD5 f198406d085b0316094e5711c349c0e0
SHA1 76db2b5fb1df6711833ce7539d32ce2e7a334580
SHA512 a9caf35567910cbcf4d74f654855da0c387106263075fb967bafd10501eab3ce7a59f81a5e1f7fde347f097e13a78ac41367620bb34c87445ead067cec2f82e8
SSDEEP 1572864:6kujRKyqLD+28NLBMk0LgTnVvFfq/vXTGTusXYHerdfIu:6kujRKyqHimkZmvjG6sXY1u
TLSH
T101D7339FB897CAAADA9D543CC983490573A72D87433CC5D3D770322EDCAA3D19D10AA4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion

Malware Config

Targets

- Target
  2026-07-09_f198406d085b0316094e5711c349c0e0_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 57.7MB
- SHA256 d3da9c383438c6cc6f61d53431c67f8dbf6cd472f44ecd0ba30b17b0bea443f4
- MD5 f198406d085b0316094e5711c349c0e0
- SHA1 76db2b5fb1df6711833ce7539d32ce2e7a334580
- SHA512 a9caf35567910cbcf4d74f654855da0c387106263075fb967bafd10501eab3ce7a59f81a5e1f7fde347f097e13a78ac41367620bb34c87445ead067cec2f82e8
- SSDEEP 1572864:6kujRKyqLD+28NLBMk0LgTnVvFfq/vXTGTusXYHerdfIu:6kujRKyqHimkZmvjG6sXY1u
- TLSH
  T101D7339FB897CAAADA9D543CC983490573A72D87433CC5D3D770322EDCAA3D19D10AA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion
- Enumerates VirtualBox DLL files
- Enumerates VirtualBox registry keys
  defense_evasion
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  defense_evasion
- Looks for Parallels drivers on disk.
  defense_evasion
- Looks for VirtualBox Guest Additions in registry
  defense_evasion
- Looks for VirtualBox drivers on disk
  defense_evasion
- Looks for VirtualBox executables on disk
- Looks for VMWare Tools registry key
  defense_evasion
- Looks for VMWare drivers on disk
  defense_evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  defense_evasion
- Loads dropped DLL
behavioral1 behavioral2