General
- Target 2026-08-19_f2870aed7ea8a49fcfeac73b934100ee_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar
- Size 78.7MB
- Sample260819-eec9yswdjh
- SHA256 677ee8a8c3b9dbd3c1ed5c0847f062490fdcb96b9c8b61ac434e2dc3fea893c9
- MD5 f2870aed7ea8a49fcfeac73b934100ee
- SHA1 f55bfdb4726498a72d3219eae214153a1456bd5b
- SHA512 b9b5c5919e88833f88ed4fd26edcf4c72b240d33c95a86a890cfe9f9ef0116820408e5365243cfdc9ee41035aeac4ac07d1fed5c8e8dd2509093e02e316b2401
- SSDEEP 1572864:GKt4d8jxDHP4iW/SsU9TdeA08snwSdUnxMFCM1SEXob5dAl9quPJ:Gu4SjSSMT8snwSUEHXwDuh
- TLSH T1E408335933FA5494E4FF03B5A9D06BE9A9912C1A0F3100D00F2BFFD61EB76D21A2D568
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_f2870aed7ea8a49fcfeac73b934100ee_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_f2870aed7ea8a49fcfeac73b934100ee_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_f2870aed7ea8a49fcfeac73b934100ee_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar
- Size 78.7MB
- SHA256 677ee8a8c3b9dbd3c1ed5c0847f062490fdcb96b9c8b61ac434e2dc3fea893c9
- MD5 f2870aed7ea8a49fcfeac73b934100ee
- SHA1 f55bfdb4726498a72d3219eae214153a1456bd5b
- SHA512 b9b5c5919e88833f88ed4fd26edcf4c72b240d33c95a86a890cfe9f9ef0116820408e5365243cfdc9ee41035aeac4ac07d1fed5c8e8dd2509093e02e316b2401
- SSDEEP 1572864:GKt4d8jxDHP4iW/SsU9TdeA08snwSdUnxMFCM1SEXob5dAl9quPJ:Gu4SjSSMT8snwSUEHXwDuh
- TLSH T1E408335933FA5494E4FF03B5A9D06BE9A9912C1A0F3100D00F2BFFD61EB76D21A2D568
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.