General
- Target 2026-08-19_ebff90d3684022005f9d500c39e68441_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 6.9MB
- Sample260820-bpxvkaag74
- SHA256 02bc44c5b0b4698a3328c6bccc9deaf746b3428bd9563ce38f0cf827cab487c5
- MD5 ebff90d3684022005f9d500c39e68441
- SHA1 b503451090664121b239656b81c8dcd672b7ef00
- SHA512 e659eb691c6c01c373761675a2f4e7eff23f78943f5ede1971f0e5d5ea26a9bc693dcc1f22fdb4812c8c3416c87b676e094ae96423819185abb231cb15eb9872
- SSDEEP 98304:16kT1VZPIGGxflaXDeyi7T2WAUDczx2AjNSYfEIth8lcXn+3yrzuGfE19sXT5mI4:Hv2flSE26DA2AjNSY42OoutrqFRU9D
- TLSH T1DB763395F0C214EDD26B833D704A0915C6BA762187F443EF67B196A12B237D2AE39F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_ebff90d3684022005f9d500c39e68441_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_ebff90d3684022005f9d500c39e68441_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_ebff90d3684022005f9d500c39e68441_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 6.9MB
- SHA256 02bc44c5b0b4698a3328c6bccc9deaf746b3428bd9563ce38f0cf827cab487c5
- MD5 ebff90d3684022005f9d500c39e68441
- SHA1 b503451090664121b239656b81c8dcd672b7ef00
- SHA512 e659eb691c6c01c373761675a2f4e7eff23f78943f5ede1971f0e5d5ea26a9bc693dcc1f22fdb4812c8c3416c87b676e094ae96423819185abb231cb15eb9872
- SSDEEP 98304:16kT1VZPIGGxflaXDeyi7T2WAUDczx2AjNSYfEIth8lcXn+3yrzuGfE19sXT5mI4:Hv2flSE26DA2AjNSY42OoutrqFRU9D
- TLSH T1DB763395F0C214EDD26B833D704A0915C6BA762187F443EF67B196A12B237D2AE39F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.