General
- Target 2026-07-17_f5eda3691eb498d0fdda420de3a92173_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 45.6MB
- Sample260718-bt1f9aby2m
- SHA256 e21ade09ea48d84620405b7bd964cd825db04dfe6c1bc8a57c6d588fc4c74627
- MD5 f5eda3691eb498d0fdda420de3a92173
- SHA1 3800cdf55cc4518516f72b9704e8af74695e399c
- SHA512 0da8042ccac8368747a3365d3f4dedfb0bc7133b91b320cdb0c4af0e19baffc7690e402c6a0e4aed6bc3ece84192cb7ff9e17817951bd3f2cf8498f43a3586d6
- SSDEEP 786432:0DghMwuXqP776MtQZZ7GlOxz8yzWVpXHKijD694H7GwpisRpuujg+n894s:NnuXqPiMWRtNzGXHKAbHiw8sRpcl99
- TLSH T1C9A73352938D5BBAF5CB46F2C8E691B3214F3C4B1B9BF5531460AF21392E7C15E34A82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_f5eda3691eb498d0fdda420de3a92173_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_f5eda3691eb498d0fdda420de3a92173_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_f5eda3691eb498d0fdda420de3a92173_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 45.6MB
- SHA256 e21ade09ea48d84620405b7bd964cd825db04dfe6c1bc8a57c6d588fc4c74627
- MD5 f5eda3691eb498d0fdda420de3a92173
- SHA1 3800cdf55cc4518516f72b9704e8af74695e399c
- SHA512 0da8042ccac8368747a3365d3f4dedfb0bc7133b91b320cdb0c4af0e19baffc7690e402c6a0e4aed6bc3ece84192cb7ff9e17817951bd3f2cf8498f43a3586d6
- SSDEEP 786432:0DghMwuXqP776MtQZZ7GlOxz8yzWVpXHKijD694H7GwpisRpuujg+n894s:NnuXqPiMWRtNzGXHKAbHiw8sRpcl99
- TLSH T1C9A73352938D5BBAF5CB46F2C8E691B3214F3C4B1B9BF5531460AF21392E7C15E34A82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Loads dropped DLL