Overview

overview

7

Static

static

3

2026-08-07...om.exe

windows10-2004-x64

7

2026-08-07...om.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    134s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    07/08/2026, 03:42

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-07_db3a3c72d46af134624bd15e31742b62_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
  • Size 16.2MB
  • Sample260807-d9tprafl9w
  • SHA256 7c29bc80e613f2fb70081318be052a47019c237094ac0bbc6ffe1e68ba73ea36
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 25 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-07_db3a3c72d46af134624bd15e31742b62_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-07_db3a3c72d46af134624bd15e31742b62_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2120
    • C:\Users\Admin\AppData\Local\Temp\2026-08-07_db3a3c72d46af134624bd15e31742b62_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
      C:\Users\Admin\AppData\Local\Temp\2026-08-07_db3a3c72d46af134624bd15e31742b62_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of SetWindowsHookEx
      PID:1108

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        MSVCP140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\MSVCP140.dll
        • Size 627KB
        • SHA256 639342ea9a67c0009122238ce070a8257e2e04d367d627509fec29f8442afb42
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\_bz2.pyd
        • Size 85KB
        • SHA256 33641a8ad0403473d678c7435197d49550fc5185ba7979fb16ab80256b1f9072
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\_ctypes.pyd
        • Size 139KB
        • SHA256 79967d8614f735cc62b81649641fd8d0414ca66d3d6656fa7788334bbdbbd35b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\_hashlib.pyd
        • Size 67KB
        • SHA256 58c5c9ff93f989e2a233b8c5e06420ea73dd6c013e1f08d996fb0f2828eba0aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\_lzma.pyd
        • Size 157KB
        • SHA256 a01f1927adaa60adcfbe3b0314205a528cb9dd5a93b7e61cb284eddee9b0b347
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\_socket.pyd
        • Size 85KB
        • SHA256 435a86973131c5d5dc90f828e72d7bb0607578a48ab5bc5377f4a280a6beb8f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _uuid.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\_uuid.pyd
        • Size 27KB
        • SHA256 35f26f7f55ded30da92ed30258fb9624a7398ba3eadee134813133c560fcbbae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\_wmi.pyd
        • Size 39KB
        • SHA256 eccb72a070d63f0ddde054c7a15d375b11b1dfc3362452c55ccabb487dee87fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _zstd.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\_zstd.pyd
        • Size 491KB
        • SHA256 e5924e2985186797668dd3b2e1efeb9313459258a4564dbf5499935c7ebd44e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dmft_setup.ico
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\assets\icons\dmft_setup.ico
        • Size 88KB
        • SHA256 3a45cb5230b67184014cae368731b4440be6b0d6e011a7ec6bd3ae913dc6d27d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dmft_setup.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\dmft_setup.dll
        • Size 20.8MB
        • SHA256 5145766cdd0be967a5ac9e471dda54c27cc4fc9120ae4b0de79e8362df0f4db8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 eaf6d613b95b61a39558d84c50e72630a66c99914292df88e7b54ebd60c5bd34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _psutil_windows.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\psutil\_psutil_windows.pyd
        • Size 76KB
        • SHA256 f83b6dad8130fca69394ab416228d010699d5797355f326a550d1b4ebb79bb44
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\python3.dll
        • Size 72KB
        • SHA256 1dd696f02326e32e67b52c25b249b3acce3238176212d16e8fb1a050a1455ae9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python314.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\python314.dll
        • Size 6.5MB
        • SHA256 a07f7d09c3121492bb066535c6d0811df5fbc2090cbca7031a97bb47ce1480c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        terms_of_service.txt
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\terms_of_service.txt
        • Size 4KB
        • SHA256 2c2fd815ea9f90d3e1d9dd2fdc0ab6a9bd2c1cb149e60c722a91ec2da3e7dcac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vcruntime140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\vcruntime140_1.dll
        • Size 48KB
        • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _core.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\wx\_core.pyd
        • Size 7.4MB
        • SHA256 dc5e6cf29b153d50effde50c96549c83505710618939762adf31d5fc1bd280e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _grid.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\wx\_grid.pyd
        • Size 675KB
        • SHA256 3cb13f6c1910a7e03c72cf807e9a9b5919d744ad83cf2e4cc213393567fe65f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        siplib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\wx\siplib.pyd
        • Size 122KB
        • SHA256 5c4b262e5c1a298e60ec9b8df67ce4fa81ee61d21fbeeab237538899c7010bff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wxbase32u_net_vc140_x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\wxbase32u_net_vc140_x64.dll
        • Size 259KB
        • SHA256 923eed87004099bbd9a0b0dd1b3567b364446867cbafc322dc7516e0606d738e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wxbase32u_vc140_x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\wxbase32u_vc140_x64.dll
        • Size 2.9MB
        • SHA256 20fa9c019a614b2c54195db10311e387ee546201581dbb9dc226c5c6824708fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wxmsw32u_core_vc140_x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\2120_363233_wiswu3eTG8M\wxmsw32u_core_vc140_x64.dll
        • Size 8.1MB
        • SHA256 3b028f1b4ccb1a0501df76e81d9e6a4f66b71e1632991346cc8cd6c928c05b3d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1108-78-0x00007FFAC9CA0000-0x00007FFACA40F000-memory.dmp
        Download