2026-08-01_e69400252c5c1e4a7c15c2b07ba517f4_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom

General

Target
2026-08-01_e69400252c5c1e4a7c15c2b07ba517f4_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom
Size 8.4MB
Sample260802-eergkscq51
SHA256 fc1a4a6672cb192cc11c64f41812f97f8c31b2f6437b9920f1fbc85a63c8deeb
MD5 e69400252c5c1e4a7c15c2b07ba517f4
SHA1 4e5d994de24e90cbde9b5ce1124b3494f31ab5c0
SHA512 9ee9388a653fd8f902f15ceee4d6e785b234682f1a2810b84b9762f1807720ba759decea9f9c36b7b13eba8f581035da5fc8cfbceb3b7df85c09200c4238fb32
SSDEEP 196608:WxGdBaTpk4mG/nYt/UPuz+PyY9S+1fdK0TXedorV4qQq:LdKp8G/nYt/IW+PyY9xdKEXVV4q
TLSH
T1B8963318A5A09CFEF4A79379E8700155DB76E8841321C3EB07A1B2A12F735E11F36BD6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-01_e69400252c5c1e4a7c15c2b07ba517f4_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom

File Explorer

2026-08-01_e69400252c5c1e4a7c15c2b07ba517f4_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom

.exe 8.4MB

2026-08-01_e69400252c5c1e4a7c15c2b07ba517f4_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom

IMPHASH ad510aa4318530074af11ba8249f6938
SHA256 fc1a4a6672cb192cc11c64f41812f97f8c31b2f6437b9920f1fbc85a63c8deeb
MD5 e69400252c5c1e4a7c15c2b07ba517f4
SHA1 4e5d994de24e90cbde9b5ce1124b3494f31ab5c0
SHA512 9ee9388a653fd8f902f15ceee4d6e785b234682f1a2810b84b9762f1807720ba759decea9f9c36b7b13eba8f581035da5fc8cfbceb3b7df85c09200c4238fb32
SSDEEP 196608:WxGdBaTpk4mG/nYt/UPuz+PyY9S+1fdK0TXedorV4qQq:LdKp8G/nYt/IW+PyY9xdKEXVV4q
TLSH
T1B8963318A5A09CFEF4A79379E8700155DB76E8841321C3EB07A1B2A12F735E11F36BD6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

54984

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHGetFolderPathW CommandLineToArgvW

kernel32

LeaveCriticalSection WriteConsoleW GetStdHandle GetCommandLineW GetEnvironmentVariableW SetEnvironmentVariableW CreateDirectoryW CreateFileW GetFileSize GetShortPathNameW WriteFile GetTempPathW CloseHandle GetLastError WaitForSingleObject GetCurrentProcessId TerminateProcess GetExitCodeProcess CreateProcessW GetSystemTimeAsFileTime CreateFileMappingW MapViewOfFile UnmapViewOfFile GetModuleFileNameW GetProcAddress LoadResource LockResource SizeofResource FormatMessageA FindResourceA SetDllDirectoryW WideCharToMultiByte SetConsoleCtrlHandler QueryPerformanceCounter GetCurrentThreadId InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW HeapReAlloc RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetCurrentProcess ExitProcess FreeLibrary GetModuleHandleExW IsProcessorFeaturePresent GetCommandLineA GetStringTypeW HeapAlloc HeapFree RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter MultiByteToWideChar VirtualProtect LoadLibraryExW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx HeapSize

Name

.text

Size

140KB

Virtual Size

139KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

60KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

161KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

8.2MB

Virtual Size

8.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-01_e69400252c5c1e4a7c15c2b07ba517f4_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom

shell32

kernel32

generic