General
- Target 2026-08-10_bd7b5af8c33164d89a232df1e4853862_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 46.3MB
- Sample260810-ce349sygmh
- SHA256 45de333a0840b40c25f455883b3cff5a721ea682e1de6a94a9ba2b9d3b76f825
- MD5 bd7b5af8c33164d89a232df1e4853862
- SHA1 b9b08e0fad157f33d06026e6e0da0b1cacc427e0
- SHA512 b7f355a3001047a2307573a6a9d29fefc0420d6f2d3f4cb3901cf0a75c4e09db286ba4f29a8cb5e9c3c8cc8564bcb4920aaf2eb078b1b1e7759d8c8809c4bebd
- SSDEEP 786432:UW5w+VEw6jCpJd+RdgqG7SISHjugrtKr+SrT17qvmYK7ZH1Ty5xk65tBKPdF41DF:U6wi6AJEDu7TSDubiU1WvTY1+kQyPdVm
- TLSH T1C7B733203EF6863EDE8762BCC8074AA0D9627D048BA06FDB9319F7955A27BF40D54371
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_bd7b5af8c33164d89a232df1e4853862_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_bd7b5af8c33164d89a232df1e4853862_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_bd7b5af8c33164d89a232df1e4853862_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 46.3MB
- SHA256 45de333a0840b40c25f455883b3cff5a721ea682e1de6a94a9ba2b9d3b76f825
- MD5 bd7b5af8c33164d89a232df1e4853862
- SHA1 b9b08e0fad157f33d06026e6e0da0b1cacc427e0
- SHA512 b7f355a3001047a2307573a6a9d29fefc0420d6f2d3f4cb3901cf0a75c4e09db286ba4f29a8cb5e9c3c8cc8564bcb4920aaf2eb078b1b1e7759d8c8809c4bebd
- SSDEEP 786432:UW5w+VEw6jCpJd+RdgqG7SISHjugrtKr+SrT17qvmYK7ZH1Ty5xk65tBKPdF41DF:U6wi6AJEDu7TSDubiU1WvTY1+kQyPdVm
- TLSH T1C7B733203EF6863EDE8762BCC8074AA0D9627D048BA06FDB9319F7955A27BF40D54371
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Detects executables containing URLs to raw contents of a Github gist
-
Loads dropped DLL