General
- Target 2026-07-18_09e0c8e4ee826094c0b6fa4b70c9a431_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 45.9MB
- Sample260718-bmntwaft51
- SHA256 2f40278839e395dbbd6d3b35bbb9a5f79ded95a6ed6ec39f7f69ed6cb4aa6ee8
- MD5 09e0c8e4ee826094c0b6fa4b70c9a431
- SHA1 ca4727c779bcac78c9ee0ff6c897601b01637e0c
- SHA512 8b101efdfb3b85bf4173a92b9aef8c30840f544b861c25433e185d47541639ba7485aa04f7571c93b4a62acd95b7ec1e47f533151f612025150cb1e5b66980dd
- SSDEEP 786432:jMlWJqU/zknGBxRqxsRe2wdNOJoimOl0bnaEHG/ko1tUhqBAMuwL7X8s:j4/qzknexRqX2IOybaEmhzUUBAM/R
- TLSH T189B7332BF2EB43BAC24651F08D25D0439E82B807675637872305AFF60A37B974DB5B16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_09e0c8e4ee826094c0b6fa4b70c9a431_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_09e0c8e4ee826094c0b6fa4b70c9a431_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_09e0c8e4ee826094c0b6fa4b70c9a431_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 45.9MB
- SHA256 2f40278839e395dbbd6d3b35bbb9a5f79ded95a6ed6ec39f7f69ed6cb4aa6ee8
- MD5 09e0c8e4ee826094c0b6fa4b70c9a431
- SHA1 ca4727c779bcac78c9ee0ff6c897601b01637e0c
- SHA512 8b101efdfb3b85bf4173a92b9aef8c30840f544b861c25433e185d47541639ba7485aa04f7571c93b4a62acd95b7ec1e47f533151f612025150cb1e5b66980dd
- SSDEEP 786432:jMlWJqU/zknGBxRqxsRe2wdNOJoimOl0bnaEHG/ko1tUhqBAMuwL7X8s:j4/qzknexRqX2IOybaEmhzUUBAM/R
- TLSH T189B7332BF2EB43BAC24651F08D25D0439E82B807675637872305AFF60A37B974DB5B16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Loads dropped DLL