General
- Target 2026-08-07_9535a692f1830e1d0ceefa056a67c4e6_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 14.7MB
- Sample260807-1nzefaab79
- SHA256 5ba85c5fa044822b6e6cbac04c944c835c0a8132ba7848c83b904191268fb8df
- MD5 9535a692f1830e1d0ceefa056a67c4e6
- SHA1 ff43df16e00a486d68041f0d4e63ec928f043e0f
- SHA512 2734beb66bdbdf0dd0cd5c255feb136e7b0d95a7693a4f73086d78f87e72e525ff8aecbed6916fb47432ffba970624868afe41fe123faae773787c9430359c30
- SSDEEP 393216:aJwP9DgqZSm7YfQEHYLriw4cCjGcBTNsmJe:RB7YfQE4L3rCDc
- TLSH T169F63309A77300E8EA5B93BAD805CE827EB775B15356FFE7476DD0686E36090C639230
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_9535a692f1830e1d0ceefa056a67c4e6_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_9535a692f1830e1d0ceefa056a67c4e6_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_9535a692f1830e1d0ceefa056a67c4e6_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 14.7MB
- SHA256 5ba85c5fa044822b6e6cbac04c944c835c0a8132ba7848c83b904191268fb8df
- MD5 9535a692f1830e1d0ceefa056a67c4e6
- SHA1 ff43df16e00a486d68041f0d4e63ec928f043e0f
- SHA512 2734beb66bdbdf0dd0cd5c255feb136e7b0d95a7693a4f73086d78f87e72e525ff8aecbed6916fb47432ffba970624868afe41fe123faae773787c9430359c30
- SSDEEP 393216:aJwP9DgqZSm7YfQEHYLriw4cCjGcBTNsmJe:RB7YfQE4L3rCDc
- TLSH T169F63309A77300E8EA5B93BAD805CE827EB775B15356FFE7476DD0686E36090C639230
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext