Overview

overview

7

Static

static

3

2026-08-13...ar.exe

windows10-2004-x64

7

2026-08-13...ar.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    149s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    13/08/2026, 04:45

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-13_67128900d25964269b7068755d071161_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar.exe
  • Size 7.3MB
  • Sample260813-fdqdkazzax
  • SHA256 6b312c342e63a9d563e27656f686e3460831df0994757aca6225c7a41a2440f8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 20 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-13_67128900d25964269b7068755d071161_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-13_67128900d25964269b7068755d071161_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5100
    • C:\Users\Admin\AppData\Local\Temp\2026-08-13_67128900d25964269b7068755d071161_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar.exe
      C:\Users\Admin\AppData\Local\Temp\2026-08-13_67128900d25964269b7068755d071161_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar.exe
      2⤵
      • Loads dropped DLL
      PID:3924

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5100_150288_JmiGDSkMezc\VCRUNTIME140.dll
        • Size 97KB
        • SHA256 1a130e77ef1995a593e7e621fa384c8404dcfa90ba705fb12ac8ad47b2812edb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5100_150288_JmiGDSkMezc\_bz2.pyd
        • Size 70KB
        • SHA256 dda635b25c3df140b17fa0571c4c37f7309811875493ae99638a6a0268ac1003
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5100_150288_JmiGDSkMezc\_ctypes.pyd
        • Size 120KB
        • SHA256 dc3ce3500d2376e2aae428caad3c975083bcaae92377427a71d82346d1cac45a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5100_150288_JmiGDSkMezc\_hashlib.pyd
        • Size 54KB
        • SHA256 7e4eca381d4515c623bf861a22e15f215f8c5b72812bd1fa451e1726c0bcb9f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5100_150288_JmiGDSkMezc\_lzma.pyd
        • Size 144KB
        • SHA256 d622c3e0cefb9e229fc4b054056f951404e4b9a0709253007e3f86c48850a277
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5100_150288_JmiGDSkMezc\_queue.pyd
        • Size 21KB
        • SHA256 caada4fc8b583afdcfbdcc16a850dc42b9bb84f218357d0e6c5c06af35f03295
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5100_150288_JmiGDSkMezc\_socket.pyd
        • Size 71KB
        • SHA256 1c464542220ced9035d5bdc95e9deb7738d1cb585ddb1c77a8443d0c6e31a0e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5100_150288_JmiGDSkMezc\_ssl.pyd
        • Size 164KB
        • SHA256 9837acbebfe2995805d4eb3ecc8bdfa5a23898e65ca48ffab9282bf4424ccd83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5100_150288_JmiGDSkMezc\_wmi.pyd
        • Size 25KB
        • SHA256 efabac67908a326c4eed86ec3ae245471a578f06401cf698302e346b55166b08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ada92cb5d92a588d1b93__mypyc.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5100_150288_JmiGDSkMezc\ada92cb5d92a588d1b93__mypyc.pyd
        • Size 221KB
        • SHA256 58c25c988641247cc153a987d1080dceb65c3a5cea68be96f0ac5b29c700ab05
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cd.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5100_150288_JmiGDSkMezc\charset_normalizer\cd.pyd
        • Size 10KB
        • SHA256 77e1c9c2679ea4855d5b97dba2666c6b4cfe32636945f5bb8399ff2c7ef1b050
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        disc_link_refresher.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5100_150288_JmiGDSkMezc\disc_link_refresher.dll
        • Size 9.6MB
        • SHA256 480845ec31aefdabb670cbba5f89fc493a3f0045a8f0c0b8cb944beed7bf5fc5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3-x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5100_150288_JmiGDSkMezc\libcrypto-3-x64.dll
        • Size 5.7MB
        • SHA256 86d2f935a3e19494ea2f0cde6b03854a7b5b76f22c9ff7a17d2c8523be4ca220
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5100_150288_JmiGDSkMezc\libffi-8.dll
        • Size 27KB
        • SHA256 ef421398d58cd7008cc880ec208072b5fd4a81bdf449dad6318aaa3a7cd4dbe8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3-x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5100_150288_JmiGDSkMezc\libssl-3-x64.dll
        • Size 914KB
        • SHA256 9fbf4d2db8dabe1c3a255658d0e81d8254b76ad824993181a47ae4af60ac46d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python313.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5100_150288_JmiGDSkMezc\python313.dll
        • Size 5.8MB
        • SHA256 e1ff5878af41e21bf64b9916ed6735ca30ce48623e3d941fdd1460a541611596
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5100_150288_JmiGDSkMezc\select.pyd
        • Size 18KB
        • SHA256 fe34b99320ef4811d04a8b4a84a6e79ab997a7b0f1d305849b486d5c989ada2d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5100_150288_JmiGDSkMezc\unicodedata.pyd
        • Size 681KB
        • SHA256 7109dbeb1e6d279613a8b33cc691540f39333b192e251191f06ac701cec93e06
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vcruntime140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5100_150288_JmiGDSkMezc\vcruntime140_1.dll
        • Size 28KB
        • SHA256 bd7fcd1973d05e358329c06c56435396f7e9c50fb6fe6a3b4d33eb7489a73e69
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download