General
- Target 2026-07-14_dcba8647a9633791d6cf772238e7d9d1_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 45.5MB
- Sample260714-rr3rlahs2x
- SHA256 c3e95570e3dc99270ca30513c205a66654c774fe08f6ce2e316360ae1049b263
- MD5 dcba8647a9633791d6cf772238e7d9d1
- SHA1 634a4d5318fab834443eced1c98129040122b60f
- SHA512 35beaabb981cee9bfa21c7facb34b47740f52d8160bed3d8552af95e055970fa54042263987f755827b94bdbc601a45e85d2d632560c012fd53f2a96caa4c8ea
- SSDEEP 786432:5nnMtcUWr/KzC8Sg37zJXmkfxSuev9OLkEz5EWwEpiTNjgtflTJeKvjuCqkOOvPs:NqCKzYgLzJXVxBevtEz5lwGiheNTIKvC
- TLSH T10DA73362F2DD43EAD54588B2DC904943A63B6C0B17D839D77256AF022E37FC629BD813
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_dcba8647a9633791d6cf772238e7d9d1_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_dcba8647a9633791d6cf772238e7d9d1_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_dcba8647a9633791d6cf772238e7d9d1_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 45.5MB
- SHA256 c3e95570e3dc99270ca30513c205a66654c774fe08f6ce2e316360ae1049b263
- MD5 dcba8647a9633791d6cf772238e7d9d1
- SHA1 634a4d5318fab834443eced1c98129040122b60f
- SHA512 35beaabb981cee9bfa21c7facb34b47740f52d8160bed3d8552af95e055970fa54042263987f755827b94bdbc601a45e85d2d632560c012fd53f2a96caa4c8ea
- SSDEEP 786432:5nnMtcUWr/KzC8Sg37zJXmkfxSuev9OLkEz5EWwEpiTNjgtflTJeKvjuCqkOOvPs:NqCKzYgLzJXVxBevtEz5lwGiheNTIKvC
- TLSH T10DA73362F2DD43EAD54588B2DC904943A63B6C0B17D839D77256AF022E37FC629BD813
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Loads dropped DLL