c02fff6dbf6ab617432e1066b7b797778e93a61a30f2bbd3d7495f1f153d1aa1 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

2026-08-08...om.exe

windows10-2004-x64

8

2026-08-08...om.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_8ff7eb3558a8b32b199427c19ea37d8e_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
Size 18.4MB
Sample260808-v57t9aar3x
SHA256 c02fff6dbf6ab617432e1066b7b797778e93a61a30f2bbd3d7495f1f153d1aa1
MD5 8ff7eb3558a8b32b199427c19ea37d8e
SHA1 6f59659fd6c790b5a13dfc1bd93aff58492ae8f4
SHA512 dc22b60bcffe2942dd1815e89bf15679f07f9fbddef00578236228377fde68a668a29dde168cfb12e7a33ca01fe4ea8dd6e5f03b1dd3b9527e3d932b237d1c31
SSDEEP 393216:kuxJyiPVqbwOgxww5jNLIj+4FYS/VXPYuSFuJnlOENnwg:ryiPV91XxIj+4t/SzFIlOENP
TLSH
T1E3173300A1C240F0C987CAB8B8949250D4B76CF65736B7D712BD87D93F2B6E56A39B13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution exploit persistence privilege_escalation

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-08_8ff7eb3558a8b32b199427c19ea37d8e_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

17 signatures

150 seconds

defense_evasion discovery execution exploit persistence privilege_escalation

Behavioral task

behavioral2

Sample

2026-08-08_8ff7eb3558a8b32b199427c19ea37d8e_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

17 signatures

150 seconds

defense_evasion discovery execution exploit persistence privilege_escalation

Malware Config

Targets

- Target
  2026-08-08_8ff7eb3558a8b32b199427c19ea37d8e_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 18.4MB
- SHA256 c02fff6dbf6ab617432e1066b7b797778e93a61a30f2bbd3d7495f1f153d1aa1
- MD5 8ff7eb3558a8b32b199427c19ea37d8e
- SHA1 6f59659fd6c790b5a13dfc1bd93aff58492ae8f4
- SHA512 dc22b60bcffe2942dd1815e89bf15679f07f9fbddef00578236228377fde68a668a29dde168cfb12e7a33ca01fe4ea8dd6e5f03b1dd3b9527e3d932b237d1c31
- SSDEEP 393216:kuxJyiPVqbwOgxww5jNLIj+4FYS/VXPYuSFuJnlOENnwg:ryiPV91XxIj+4t/SzFIlOENP
- TLSH
  T1E3173300A1C240F0C987CAB8B8949250D4B76CF65736B7D712BD87D93F2B6E56A39B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery execution exploit persistence privilege_escalation
- Possible privilege escalation attempt
  exploit
- Creates new service(s)
  persistence execution
- Executes dropped EXE
- Loads dropped DLL
- Modifies file permissions
  discovery
- Stops running service(s)
  defense_evasion execution
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

File and Directory Permissions Modification

Impair Defenses

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionexploitpersistenceprivilege_escalation

behavioral2

defense_evasiondiscoveryexecutionexploitpersistenceprivilege_escalation

© 2018-2026

Terms | Privacy