General
- Target 2026-08-20_aa66b5bf2706cdc6f87a9388f0696fdb_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 340KB
- Sample260820-vxlxtagj9v
- SHA256 79311c263dbe2747cbcd3a198c8b77178fbb0ee1279755f4a76033f53cf59fc6
- MD5 aa66b5bf2706cdc6f87a9388f0696fdb
- SHA1 9d743da0a8921722f23dda5edeb37fe746cff32d
- SHA512 f026ec8531fa20351cc4f2c107a4cab68ed40398048770f42c5abc4967bbbe5db3a1f2a5e1e38b34986f3d870d0ba85b2a6fe6638e7df3faf99b54b9c9ee5ca9
- SSDEEP 6144:fGbAtwDk6jeaK71dG12vXxkz0rziYEfuvolOb7H:e8aeD71dG12vhkzeREfwCA
- TLSH T18C748C98B7E500F9F5B3527DCAA28506DB72BC164730C6DF13A0826A2F33AD15D39762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_aa66b5bf2706cdc6f87a9388f0696fdb_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_aa66b5bf2706cdc6f87a9388f0696fdb_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_aa66b5bf2706cdc6f87a9388f0696fdb_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 340KB
- SHA256 79311c263dbe2747cbcd3a198c8b77178fbb0ee1279755f4a76033f53cf59fc6
- MD5 aa66b5bf2706cdc6f87a9388f0696fdb
- SHA1 9d743da0a8921722f23dda5edeb37fe746cff32d
- SHA512 f026ec8531fa20351cc4f2c107a4cab68ed40398048770f42c5abc4967bbbe5db3a1f2a5e1e38b34986f3d870d0ba85b2a6fe6638e7df3faf99b54b9c9ee5ca9
- SSDEEP 6144:fGbAtwDk6jeaK71dG12vXxkz0rziYEfuvolOb7H:e8aeD71dG12vhkzeREfwCA
- TLSH T18C748C98B7E500F9F5B3527DCAA28506DB72BC164730C6DF13A0826A2F33AD15D39762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext