General
- Target 2026-07-29_44730e9d5a3199c7f1f395d45322da10_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 132.7MB
- Sample260729-dasy6sshja
- SHA256 aa1d0a8ed2108aa0f2cefee7aaa08f268707f9e91a07ba69a7a14c4f5549d91b
- MD5 44730e9d5a3199c7f1f395d45322da10
- SHA1 2bfad3b01c1b95918833246d17f02e515dde2cea
- SHA512 a69f35289cfbca536640143da9077ea3eaf9b5a90260b72e8c1683ee8735c9efe98263d21932f858d05b0552d6eb1c21d56fb3885ecd7d7524b257ea8f5cc1c9
- SSDEEP 3145728:ftcX7KNYxwfbPh7degrEgQTj3n/kjpa99thFrYKXg4o:Vo7KNMUbuTLcU99d/
- TLSH T1BA6833D379F4D034F626D9B8986044BDD9953C560E91424B02FE31AE9B32384E8F9F6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_44730e9d5a3199c7f1f395d45322da10_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_44730e9d5a3199c7f1f395d45322da10_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 132.7MB
- SHA256 aa1d0a8ed2108aa0f2cefee7aaa08f268707f9e91a07ba69a7a14c4f5549d91b
- MD5 44730e9d5a3199c7f1f395d45322da10
- SHA1 2bfad3b01c1b95918833246d17f02e515dde2cea
- SHA512 a69f35289cfbca536640143da9077ea3eaf9b5a90260b72e8c1683ee8735c9efe98263d21932f858d05b0552d6eb1c21d56fb3885ecd7d7524b257ea8f5cc1c9
- SSDEEP 3145728:ftcX7KNYxwfbPh7degrEgQTj3n/kjpa99thFrYKXg4o:Vo7KNMUbuTLcU99d/
- TLSH T1BA6833D379F4D034F626D9B8986044BDD9953C560E91424B02FE31AE9B32384E8F9F6E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL