General
- Target 2026-07-27_b2112cae77cce0e35c137b8146fdb508_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 31.5MB
- Sample260727-g3j4hswhpg
- SHA256 28659990e64cd68df14133c99e6257cd8af5f376ef4207e6d4895da2607519dc
- MD5 b2112cae77cce0e35c137b8146fdb508
- SHA1 d2e6aa49293b70b456cc8c4a06bc8506a4b01a17
- SHA512 bb962853d0e7a71d9665f791587835e80d09b1e8f2fef377fb6702cb658a4a08fcfa49e551886482dc9f68bce196a3664ffb137229a784827add88befdd90595
- SSDEEP 786432:k/MGxDPRGpvfgUV3jsP7eIIXrpB4NMRC29h+rVJyiu9Tzfd:fGxgpvf3VTsDerXrpB6CSrDyrVd
- TLSH T1A177331062F11765F431C63DE84B5410F3C6A7F2AB1B08AFB7A6DA485B335D13A76B0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_b2112cae77cce0e35c137b8146fdb508_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_b2112cae77cce0e35c137b8146fdb508_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_b2112cae77cce0e35c137b8146fdb508_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 31.5MB
- SHA256 28659990e64cd68df14133c99e6257cd8af5f376ef4207e6d4895da2607519dc
- MD5 b2112cae77cce0e35c137b8146fdb508
- SHA1 d2e6aa49293b70b456cc8c4a06bc8506a4b01a17
- SHA512 bb962853d0e7a71d9665f791587835e80d09b1e8f2fef377fb6702cb658a4a08fcfa49e551886482dc9f68bce196a3664ffb137229a784827add88befdd90595
- SSDEEP 786432:k/MGxDPRGpvfgUV3jsP7eIIXrpB4NMRC29h+rVJyiu9Tzfd:fGxgpvf3VTsDerXrpB6CSrDyrVd
- TLSH T1A177331062F11765F431C63DE84B5410F3C6A7F2AB1B08AFB7A6DA485B335D13A76B0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Loads dropped DLL