General
- Target 2026-08-16_0b77c4307a24e4cd9d0419aeee7dcdbd_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 10.1MB
- Sample260816-stchvs1crb
- SHA256 ed1c6bb0cbee6c82354d61f3fcd04d44adddc7b1e06374fd755647917dd4a995
- MD5 0b77c4307a24e4cd9d0419aeee7dcdbd
- SHA1 e0d7fdff840b3221963f0f4b2d1141aecae0eb8a
- SHA512 533a1123173c595a815ee47b8ceac84a276d6e437faf063b89bfdc4826d3341c15c303e4e11912b92178a40a5cf0e0cf0d766f385f93d5994c9d99dcc8d21fdf
- SSDEEP 196608:W+6smk0bL8VnP+gFF7eQ/vXMg67JvnXkdk2Rb8gT8i6xXjI7aKCVcv:X3zML8VmgFrXcg4nXA/SXjI7h
- TLSH T1D4B63339769510F0E967A5BC84ABAF82BF51386107C542EB4291DFD50E63AF0CFBB604
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_0b77c4307a24e4cd9d0419aeee7dcdbd_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_0b77c4307a24e4cd9d0419aeee7dcdbd_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_0b77c4307a24e4cd9d0419aeee7dcdbd_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 10.1MB
- SHA256 ed1c6bb0cbee6c82354d61f3fcd04d44adddc7b1e06374fd755647917dd4a995
- MD5 0b77c4307a24e4cd9d0419aeee7dcdbd
- SHA1 e0d7fdff840b3221963f0f4b2d1141aecae0eb8a
- SHA512 533a1123173c595a815ee47b8ceac84a276d6e437faf063b89bfdc4826d3341c15c303e4e11912b92178a40a5cf0e0cf0d766f385f93d5994c9d99dcc8d21fdf
- SSDEEP 196608:W+6smk0bL8VnP+gFF7eQ/vXMg67JvnXkdk2Rb8gT8i6xXjI7aKCVcv:X3zML8VmgFrXcg4nXA/SXjI7h
- TLSH T1D4B63339769510F0E967A5BC84ABAF82BF51386107C542EB4291DFD50E63AF0CFBB604
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables Task Manager via registry modification
-
Loads dropped DLL
-
Adds Run key to start application