General
- Target 2026-08-11_252ab4b288060d0d29b001c2cb9a3dbd_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 24.2MB
- Sample260811-tf54pas1gs
- SHA256 077b207cccf289c5b069713a959d17ae24a7b5a3971565b40ac41084cb567d5c
- MD5 252ab4b288060d0d29b001c2cb9a3dbd
- SHA1 479d2831d9a9f9fa50b30fd2afd4e4415574bcb5
- SHA512 6480beb47c7353a952e583c4b99d77188f743471041af51a9bf7c517d73aae43ac5af13904413b0a9800e0bcffb1bf7ef779b08711f04cf932245d99ef1e0236
- SSDEEP 786432:J9EzshRuiQh+hCwPNR2tNkBOL0ZPk9wiN:fE4EOtFR24qN
- TLSH T178473306206120EBDBAF86735413D6FA8296AD9E0751839F47C0BC77BD726C1CD297A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_252ab4b288060d0d29b001c2cb9a3dbd_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_252ab4b288060d0d29b001c2cb9a3dbd_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_252ab4b288060d0d29b001c2cb9a3dbd_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 24.2MB
- SHA256 077b207cccf289c5b069713a959d17ae24a7b5a3971565b40ac41084cb567d5c
- MD5 252ab4b288060d0d29b001c2cb9a3dbd
- SHA1 479d2831d9a9f9fa50b30fd2afd4e4415574bcb5
- SHA512 6480beb47c7353a952e583c4b99d77188f743471041af51a9bf7c517d73aae43ac5af13904413b0a9800e0bcffb1bf7ef779b08711f04cf932245d99ef1e0236
- SSDEEP 786432:J9EzshRuiQh+hCwPNR2tNkBOL0ZPk9wiN:fE4EOtFR24qN
- TLSH T178473306206120EBDBAF86735413D6FA8296AD9E0751839F47C0BC77BD726C1CD297A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.