Analysis
- max time kernel
149s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
31/07/2026, 04:24
General
- Target 2026-07-31_4a68f9532c5fadfd6b90b9c2f49ffc83_blankgrabber_cobalt-strike_icedid_njrat_satacom_stealc.exe
- Size 7.2MB
- Sample260731-e1g52awscv
- SHA256 5b298bb0e3273b7b6c6a4990ed48fbeddc95d5062a2cc4cc5a2d7327c0a14828
Malware Config
Signatures
- Detects executables packed with Enigma 15 IoCs
- Loads dropped DLL 3 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SendNotifyMessage 1 IoCs
- Suspicious use of SetWindowsHookEx 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-31_4a68f9532c5fadfd6b90b9c2f49ffc83_blankgrabber_cobalt-strike_icedid_njrat_satacom_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-31_4a68f9532c5fadfd6b90b9c2f49ffc83_blankgrabber_cobalt-strike_icedid_njrat_satacom_stealc.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
custom.ini
settings.ini
evb3928.tmp
evb3958.tmp
evb39A7.tmp
memory/3968-283-0x00007FFC66CC0000-0x00007FFC66F23000-memory.dmp
memory/3968-157-0x00007FFC66CC0000-0x00007FFC66F23000-memory.dmp
memory/3968-4-0x0000000180000000-0x0000000180087000-memory.dmp
memory/3968-8-0x00007FFC66CC0000-0x00007FFC66F23000-memory.dmp
memory/3968-14-0x00007FFC66CC0000-0x00007FFC66F23000-memory.dmp
memory/3968-12-0x0000000000720000-0x000000000073E000-memory.dmp
memory/3968-10-0x0000000000720000-0x000000000073E000-memory.dmp
memory/3968-16-0x00007FFC66CC0000-0x00007FFC66F23000-memory.dmp
memory/3968-18-0x0000000010000000-0x0000000010021000-memory.dmp
memory/3968-20-0x00007FFC66CC0000-0x00007FFC66F23000-memory.dmp
memory/3968-21-0x00007FFC66CC0000-0x00007FFC66F23000-memory.dmp
memory/3968-111-0x00007FFC66CC0000-0x00007FFC66F23000-memory.dmp
memory/3968-112-0x00007FFC66CC0000-0x00007FFC66F23000-memory.dmp
memory/3968-56-0x00007FFC66CC0000-0x00007FFC66F23000-memory.dmp
memory/3968-155-0x00007FFC66CC0000-0x00007FFC66F23000-memory.dmp
memory/3968-287-0x0000000000720000-0x000000000073E000-memory.dmp
memory/3968-156-0x00007FFC66CC0000-0x00007FFC66F23000-memory.dmp
memory/3968-158-0x00007FFC66CC0000-0x00007FFC66F23000-memory.dmp
memory/3968-282-0x00007FFC66CC0000-0x00007FFC66F23000-memory.dmp
memory/3968-0-0x0000000140000000-0x000000014039B000-memory.dmp
memory/3968-284-0x00007FFC66CC0000-0x00007FFC66F23000-memory.dmp
memory/3968-285-0x00007FFC66CC0000-0x00007FFC66F23000-memory.dmp
memory/3968-2-0x00007FFC66E1F000-0x00007FFC66E20000-memory.dmp
memory/3968-288-0x0000000010000000-0x0000000010021000-memory.dmp
memory/3968-356-0x0000000140000000-0x000000014039B000-memory.dmp
memory/3968-292-0x0000000010000000-0x0000000010021000-memory.dmp
memory/3968-289-0x0000000140000000-0x000000014039B000-memory.dmp
memory/3968-293-0x00007FFC66CC0000-0x00007FFC66F23000-memory.dmp
memory/3968-294-0x00007FFC66CC0000-0x00007FFC66F23000-memory.dmp
memory/3968-295-0x00007FFC66CC0000-0x00007FFC66F23000-memory.dmp
memory/3968-296-0x0000000140000000-0x000000014039B000-memory.dmp
memory/3968-318-0x0000000010000000-0x0000000010021000-memory.dmp
memory/3968-315-0x0000000140000000-0x000000014039B000-memory.dmp
memory/3968-340-0x0000000140000000-0x000000014039B000-memory.dmp
memory/3968-344-0x0000000140000000-0x000000014039B000-memory.dmp
memory/3968-351-0x0000000010000000-0x0000000010021000-memory.dmp
memory/3968-348-0x0000000140000000-0x000000014039B000-memory.dmp
memory/3968-352-0x0000000140000000-0x000000014039B000-memory.dmp
memory/3968-286-0x0000000180000000-0x0000000180087000-memory.dmp
memory/3968-360-0x0000000140000000-0x000000014039B000-memory.dmp
memory/3968-364-0x0000000140000000-0x000000014039B000-memory.dmp
memory/3968-368-0x0000000140000000-0x000000014039B000-memory.dmp
memory/3968-372-0x0000000140000000-0x000000014039B000-memory.dmp
memory/3968-376-0x0000000140000000-0x000000014039B000-memory.dmp
memory/3968-380-0x0000000140000000-0x000000014039B000-memory.dmp
memory/3968-383-0x0000000010000000-0x0000000010021000-memory.dmp