General
- Target 2026-08-03_16c2b062acb2a61fd8e5e83bb18e711e_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 10.1MB
- Sample260803-dfh16axcqe
- SHA256 04c46f8b78bb64ccaab7b1f567025e65597a936e427980941ff7ac9c58269d96
- MD5 16c2b062acb2a61fd8e5e83bb18e711e
- SHA1 9ff81b2894c011d153e1098f52d3979ecab5393b
- SHA512 72a044e53c60eddd656af448e55194c74c556f9335ded0c25c9315e5a31ff97d1699cf12310098a5b94473110335d7dec71a3b2b4489a8260cc19872c0620c86
- SSDEEP 196608:MPSTgMcdw/d5GMTG9hMC+IeMGTA492N6JyKsYciwjbGVXGTHP6gewDw7i:BWdMGL+RpngN6JTeiwXGVXgvTDw
- TLSH T10BB6331621E302FFD45F467D81E35A82E6F53950C706F8EB9B59036AAF227E01D39E21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_16c2b062acb2a61fd8e5e83bb18e711e_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_16c2b062acb2a61fd8e5e83bb18e711e_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 10.1MB
- SHA256 04c46f8b78bb64ccaab7b1f567025e65597a936e427980941ff7ac9c58269d96
- MD5 16c2b062acb2a61fd8e5e83bb18e711e
- SHA1 9ff81b2894c011d153e1098f52d3979ecab5393b
- SHA512 72a044e53c60eddd656af448e55194c74c556f9335ded0c25c9315e5a31ff97d1699cf12310098a5b94473110335d7dec71a3b2b4489a8260cc19872c0620c86
- SSDEEP 196608:MPSTgMcdw/d5GMTG9hMC+IeMGTA492N6JyKsYciwjbGVXGTHP6gewDw7i:BWdMGL+RpngN6JTeiwXGVXgvTDw
- TLSH T10BB6331621E302FFD45F467D81E35A82E6F53950C706F8EB9B59036AAF227E01D39E21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables Discord URL observed in first stage droppers
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Loads dropped DLL
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.