Overview

overview

7

Static

static

3

2026-08-08...om.exe

windows10-2004-x64

7

2026-08-08...om.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    164s
  • max time network
    116s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/08/2026, 03:05

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-08_983fb4289cb0c4196911894aaeed5f0d_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
  • Size 18.2MB
  • Sample260808-dldnmayflb
  • SHA256 e6813824c6dabacefafa9cab05e2a80d349f6cc614b442bfab81a39e8354a114
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 25 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-08_983fb4289cb0c4196911894aaeed5f0d_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-08_983fb4289cb0c4196911894aaeed5f0d_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4320
    • C:\Users\Admin\AppData\Local\Temp\2026-08-08_983fb4289cb0c4196911894aaeed5f0d_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
      C:\Users\Admin\AppData\Local\Temp\2026-08-08_983fb4289cb0c4196911894aaeed5f0d_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of SetWindowsHookEx
      PID:5828

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        MSVCP140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\MSVCP140.dll
        • Size 627KB
        • SHA256 639342ea9a67c0009122238ce070a8257e2e04d367d627509fec29f8442afb42
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\_bz2.pyd
        • Size 85KB
        • SHA256 33641a8ad0403473d678c7435197d49550fc5185ba7979fb16ab80256b1f9072
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\_ctypes.pyd
        • Size 139KB
        • SHA256 79967d8614f735cc62b81649641fd8d0414ca66d3d6656fa7788334bbdbbd35b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\_hashlib.pyd
        • Size 67KB
        • SHA256 58c5c9ff93f989e2a233b8c5e06420ea73dd6c013e1f08d996fb0f2828eba0aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\_lzma.pyd
        • Size 157KB
        • SHA256 a01f1927adaa60adcfbe3b0314205a528cb9dd5a93b7e61cb284eddee9b0b347
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\_socket.pyd
        • Size 85KB
        • SHA256 435a86973131c5d5dc90f828e72d7bb0607578a48ab5bc5377f4a280a6beb8f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _uuid.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\_uuid.pyd
        • Size 27KB
        • SHA256 35f26f7f55ded30da92ed30258fb9624a7398ba3eadee134813133c560fcbbae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\_wmi.pyd
        • Size 39KB
        • SHA256 eccb72a070d63f0ddde054c7a15d375b11b1dfc3362452c55ccabb487dee87fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _zstd.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\_zstd.pyd
        • Size 491KB
        • SHA256 e5924e2985186797668dd3b2e1efeb9313459258a4564dbf5499935c7ebd44e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dmft_setup.ico
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\assets\icons\dmft_setup.ico
        • Size 88KB
        • SHA256 3a45cb5230b67184014cae368731b4440be6b0d6e011a7ec6bd3ae913dc6d27d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dmft_setup.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\dmft_setup.dll
        • Size 20.8MB
        • SHA256 998e6cb430fd3629ab6127acc8a962a6d3ed25ea4b65dfc22af9fabc7b147420
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 eaf6d613b95b61a39558d84c50e72630a66c99914292df88e7b54ebd60c5bd34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _psutil_windows.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\psutil\_psutil_windows.pyd
        • Size 76KB
        • SHA256 d72de8262dab575d96e0a18870fa278855e81cf846fa2255e8b5f1d6d6e09f18
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\python3.dll
        • Size 72KB
        • SHA256 1dd696f02326e32e67b52c25b249b3acce3238176212d16e8fb1a050a1455ae9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python314.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\python314.dll
        • Size 6.5MB
        • SHA256 a07f7d09c3121492bb066535c6d0811df5fbc2090cbca7031a97bb47ce1480c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        terms_of_service.txt
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\terms_of_service.txt
        • Size 4KB
        • SHA256 2c2fd815ea9f90d3e1d9dd2fdc0ab6a9bd2c1cb149e60c722a91ec2da3e7dcac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vcruntime140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\vcruntime140_1.dll
        • Size 48KB
        • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _core.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\wx\_core.pyd
        • Size 7.4MB
        • SHA256 81db9e094a375724efd9e7e22ff63e6ecf111ce7da94abd70c5a596ae5d3370c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _grid.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\wx\_grid.pyd
        • Size 675KB
        • SHA256 cc351c32c601778669e931f910bca050bc1f73a0e8385edd6dcfd503f4b69a65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        siplib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\wx\siplib.pyd
        • Size 122KB
        • SHA256 eff1b34cb8259baac7db7e2cdc2aaa61f83fdf6b4b94221bbd76da0bc6dc5aef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wxbase32u_net_vc140_x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\wxbase32u_net_vc140_x64.dll
        • Size 259KB
        • SHA256 b4574292e5373e37177cda7dc76c779ab1cf0df3e7b5ced95c89a92d0a1d0e9a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wxbase32u_vc140_x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\wxbase32u_vc140_x64.dll
        • Size 2.9MB
        • SHA256 c021613b7dc2f96a03a4d1c1137b42470ed41d7165a6cd4eff8361f0a42ea29d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wxmsw32u_core_vc140_x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\DMFT\Setup\4320_969439_WrpErcuh_wA\wxmsw32u_core_vc140_x64.dll
        • Size 8.1MB
        • SHA256 9fff71b08e77a5c12e58884cf21139e21ed298f04ac30a6f48071466cd02621f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/5828-79-0x00007FFB17330000-0x00007FFB17A9F000-memory.dmp
        Download