General
- Target 2026-08-13_d0973c83e0a9a863b46e6f0f623f57a2_blankgrabber_coinminer_icedid_njrat
- Size 13.7MB
- Sample260813-dwe97syyd1
- SHA256 79d56bd114626e601c602d5b58803732e03c72a8af990a1afa35a5d4c884e23f
- MD5 d0973c83e0a9a863b46e6f0f623f57a2
- SHA1 aacb4b0829358dfe99f5b659a94e03bf0ef1b83b
- SHA512 57bf3e7726c3a8abdfd2337167bd2033832e3732c06f4023b43fa31ea6663df64c76092b654aa3359418f1591276e50c0afee06795d81dd4d86913a04b75a966
- SSDEEP 196608:ARMAMRdrv6anI9aYDjIIsDXhzDkkI5sR3lKFlp1U/atop9WUcb1PW4+JQl+Puk2:A6Rq9jPsD1kpiWlpK1QUq9qQCuk2
- TLSH T16DE63328E56389F8D4EF517041BB1779E046F9BA4B98E6FF23B180346F637E80919325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_d0973c83e0a9a863b46e6f0f623f57a2_blankgrabber_coinminer_icedid_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_d0973c83e0a9a863b46e6f0f623f57a2_blankgrabber_coinminer_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_d0973c83e0a9a863b46e6f0f623f57a2_blankgrabber_coinminer_icedid_njrat
- Size 13.7MB
- SHA256 79d56bd114626e601c602d5b58803732e03c72a8af990a1afa35a5d4c884e23f
- MD5 d0973c83e0a9a863b46e6f0f623f57a2
- SHA1 aacb4b0829358dfe99f5b659a94e03bf0ef1b83b
- SHA512 57bf3e7726c3a8abdfd2337167bd2033832e3732c06f4023b43fa31ea6663df64c76092b654aa3359418f1591276e50c0afee06795d81dd4d86913a04b75a966
- SSDEEP 196608:ARMAMRdrv6anI9aYDjIIsDXhzDkkI5sR3lKFlp1U/atop9WUcb1PW4+JQl+Puk2:A6Rq9jPsD1kpiWlpK1QUq9qQCuk2
- TLSH T16DE63328E56389F8D4EF517041BB1779E046F9BA4B98E6FF23B180346F637E80919325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing many IR and analysis tools
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger