Overview

overview

9

Static

static

3

2026-08-18...ar.exe

windows10-2004-x64

9

2026-08-18...ar.exe

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-08-18_3482e4f90f66fed2a0889fce59b25b03_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar
  • Size 65.8MB
  • Sample260818-mdarfagf26
  • SHA256 4f93e9acab85b88b0b3ce27dc85b930f936b8e59dc27e388b68bfae86c3c2a7e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
execution

Malware Config

Targets

    • Target
      2026-08-18_3482e4f90f66fed2a0889fce59b25b03_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar
    • Size 65.8MB
    • SHA256 4f93e9acab85b88b0b3ce27dc85b930f936b8e59dc27e388b68bfae86c3c2a7e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    execution

    • Detects command variations typically used by ransomware

    • Detects executables containing SQL queries to confidential data stores. Observed in infostealers

    • Detects executables containing commands for clearing Windows Event Logs

    • Detects executables embedding registry key / value combination indicative of disabling Windows Defen

    • Detects executables referencing many IR and analysis tools

    • Detects executables using Telegram Chat Bot

    • detects Windows exceutables potentially bypassing UAC using eventvwr.exe

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks