0b8627333ee8958f1ea15025af0d71286baa8a7de08e2c68e583840577d89640 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

2026-08-13...om.exe

windows10-2004-x64

8

2026-08-13...om.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-13_6029cffe9d09ab1e96e4b0ef0608be15_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
Size 20.4MB
Sample260813-lfnkmshh66
SHA256 0b8627333ee8958f1ea15025af0d71286baa8a7de08e2c68e583840577d89640
MD5 6029cffe9d09ab1e96e4b0ef0608be15
SHA1 6171b804f5d0f4a04a9cd809dbe95e5214b65c38
SHA512 e878114d1354b4805d8736d2fd543f4732c08361f460ada34124c6235c10e7a2cb9bccc99bded32db7c30dbbc9b1a448d5ee88a4b24e77ca3aae7090ee06b956
SSDEEP 393216:aLTYDS+IePyQIRO5uCLJm0ngNUvA4gtUa1i7apmdXkgyGtEc71zYS8A58ijOoh:anYDtPypMg0QUA4gSaViUV0HpkAeihh
TLSH
T1D92733541B728DF5C22361FC59C42753E39DB8250321E4EF3B9842A9AF6FAE60B31365
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution exploit persistence privilege_escalation

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-13_6029cffe9d09ab1e96e4b0ef0608be15_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

16 signatures

150 seconds

defense_evasion discovery execution exploit persistence privilege_escalation

Behavioral task

behavioral2

Sample

2026-08-13_6029cffe9d09ab1e96e4b0ef0608be15_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

16 signatures

150 seconds

defense_evasion discovery execution exploit persistence privilege_escalation

Malware Config

Targets

- Target
  2026-08-13_6029cffe9d09ab1e96e4b0ef0608be15_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 20.4MB
- SHA256 0b8627333ee8958f1ea15025af0d71286baa8a7de08e2c68e583840577d89640
- MD5 6029cffe9d09ab1e96e4b0ef0608be15
- SHA1 6171b804f5d0f4a04a9cd809dbe95e5214b65c38
- SHA512 e878114d1354b4805d8736d2fd543f4732c08361f460ada34124c6235c10e7a2cb9bccc99bded32db7c30dbbc9b1a448d5ee88a4b24e77ca3aae7090ee06b956
- SSDEEP 393216:aLTYDS+IePyQIRO5uCLJm0ngNUvA4gtUa1i7apmdXkgyGtEc71zYS8A58ijOoh:anYDtPypMg0QUA4gSaViUV0HpkAeihh
- TLSH
  T1D92733541B728DF5C22361FC59C42753E39DB8250321E4EF3B9842A9AF6FAE60B31365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery execution exploit persistence privilege_escalation
- Drops file in Drivers directory
- Possible privilege escalation attempt
  exploit
- Creates new service(s)
  persistence execution
- Executes dropped EXE
- Loads dropped DLL
- Modifies file permissions
  discovery
- Stops running service(s)
  defense_evasion execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

File and Directory Permissions Modification

Impair Defenses

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionexploitpersistenceprivilege_escalation

behavioral2

defense_evasiondiscoveryexecutionexploitpersistenceprivilege_escalation

© 2018-2026

Terms | Privacy