General
- Target 2026-07-28_492b979592b468cba1586d8dd5675d75_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 10.7MB
- Sample260728-fflhdsfa73
- SHA256 aa92638a216b356aefc10c657ba409ef42736fd3dd196e1241a868a14f2b0739
- MD5 492b979592b468cba1586d8dd5675d75
- SHA1 d3bce1974b3fbafb1574ce3e5d2092b73ae05016
- SHA512 6cc4220d0790df60b5f2f0968e4f3f9695b951a6d69b067c5080128ae5f4e582267648af71dc5356ee8f01c3409bc68db86894ff6348ce2bec905898f29da3df
- SSDEEP 196608:1myi+NJZDkiR+Ykmdsr+UWl5zwwdrrQmmQQYYQn+X4xgWQmESf:1myV9sMd4Il5zwuAE3+eg4nf
- TLSH T136B633A9F2E3E5F8C6379171E9020A44D5B37CA04B1288FB67E5655E2F0AEC11E3650F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_492b979592b468cba1586d8dd5675d75_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_492b979592b468cba1586d8dd5675d75_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_492b979592b468cba1586d8dd5675d75_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 10.7MB
- SHA256 aa92638a216b356aefc10c657ba409ef42736fd3dd196e1241a868a14f2b0739
- MD5 492b979592b468cba1586d8dd5675d75
- SHA1 d3bce1974b3fbafb1574ce3e5d2092b73ae05016
- SHA512 6cc4220d0790df60b5f2f0968e4f3f9695b951a6d69b067c5080128ae5f4e582267648af71dc5356ee8f01c3409bc68db86894ff6348ce2bec905898f29da3df
- SSDEEP 196608:1myi+NJZDkiR+Ykmdsr+UWl5zwwdrrQmmQQYYQn+X4xgWQmESf:1myV9sMd4Il5zwuAE3+eg4nf
- TLSH T136B633A9F2E3E5F8C6379171E9020A44D5B37CA04B1288FB67E5655E2F0AEC11E3650F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in r
-
Loads dropped DLL