General
- Target 2026-07-10_e0877f60921f23b723abf9c0cf0f47a9_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 36.4MB
- Sample260710-h6seqsfs9p
- SHA256 9e2add138d6a09e1c113f923e0301d063fbcdb9cd14b1ce4b3a37d34222b561f
- MD5 e0877f60921f23b723abf9c0cf0f47a9
- SHA1 f4f6a1936fa06b9467127070329bb1b565c8700f
- SHA512 2c8dd55dfd447c36e3b455f4fac5f797b0eabb0e082effa778d533cbcda69cc5e129bae12b94f95b495dd6c9883f73375bfaa8e06c84149482cfc2b2a40a7dfb
- SSDEEP 786432:zSVpWIU+p66uynEtDcJJ/ureAEjOqVg8FgDk37fq5:2VpWApfznVAO68GDkri
- TLSH T12B873330416144AEEE679FBD46480E082E66FC02BFB1FEBF8D95B2B14B777D28160516
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_e0877f60921f23b723abf9c0cf0f47a9_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_e0877f60921f23b723abf9c0cf0f47a9_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_e0877f60921f23b723abf9c0cf0f47a9_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 36.4MB
- SHA256 9e2add138d6a09e1c113f923e0301d063fbcdb9cd14b1ce4b3a37d34222b561f
- MD5 e0877f60921f23b723abf9c0cf0f47a9
- SHA1 f4f6a1936fa06b9467127070329bb1b565c8700f
- SHA512 2c8dd55dfd447c36e3b455f4fac5f797b0eabb0e082effa778d533cbcda69cc5e129bae12b94f95b495dd6c9883f73375bfaa8e06c84149482cfc2b2a40a7dfb
- SSDEEP 786432:zSVpWIU+p66uynEtDcJJ/ureAEjOqVg8FgDk37fq5:2VpWApfznVAO68GDkri
- TLSH T12B873330416144AEEE679FBD46480E082E66FC02BFB1FEBF8D95B2B14B777D28160516
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Loads dropped DLL
-
Enumerates processes with tasklist