2026-08-20_77067af49942eb19bc1330a03740c4b0_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom

General

Target
2026-08-20_77067af49942eb19bc1330a03740c4b0_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom
Size 11.5MB
Sample260821-dcdx2avya1
SHA256 bd15c6686ed77698a3af4677bd97434c685fe8f1f6c04f95ec375936beeb59ad
MD5 77067af49942eb19bc1330a03740c4b0
SHA1 f0f706dd451b8154d517107088ca894e7105f9ea
SHA512 76295020b87997197b5ed43b42e0266cde08ad463612c94bbe4cbdfe5986448bcf32758e2891652a00ebd5e89818ba0a21ad49936519ebb31786978b2f5f03ef
SSDEEP 196608:IB5T0S/lUIhhyRW92NA/iwqgliY+pg32CY3jmayPa28XKqmhST:65rNUIhTcBmp2C6j/eu8hS
TLSH
T18FC6335971C258F6D50754744B7A6982AB71BC890F83C7FBABE040E41F23AC1AA3F725
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_77067af49942eb19bc1330a03740c4b0_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom

File Explorer

2026-08-20_77067af49942eb19bc1330a03740c4b0_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom

.exe 11.5MB

2026-08-20_77067af49942eb19bc1330a03740c4b0_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom

IMPHASH d771ea0e1824cb6584f385f3e76a6e0e
SHA256 bd15c6686ed77698a3af4677bd97434c685fe8f1f6c04f95ec375936beeb59ad
MD5 77067af49942eb19bc1330a03740c4b0
SHA1 f0f706dd451b8154d517107088ca894e7105f9ea
SHA512 76295020b87997197b5ed43b42e0266cde08ad463612c94bbe4cbdfe5986448bcf32758e2891652a00ebd5e89818ba0a21ad49936519ebb31786978b2f5f03ef
SSDEEP 196608:IB5T0S/lUIhhyRW92NA/iwqgliY+pg32CY3jmayPa28XKqmhST:65rNUIhTcBmp2C6j/eu8hS
TLSH
T18FC6335971C258F6D50754744B7A6982AB71BC890F83C7FBABE040E41F23AC1AA3F725
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

52096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHFileOperationW SHGetFolderPathW CommandLineToArgvW

kernel32

FlsSetValue WriteConsoleW HeapReAlloc CreateDirectoryW SetConsoleCtrlHandler AddDllDirectory GetCommandLineW GetFullPathNameW GetStdHandle WriteFile GetShortPathNameW TerminateProcess GetModuleFileNameW SetEnvironmentVariableW K32GetModuleFileNameExW GetEnvironmentVariableW GetTempPathW WaitForSingleObject CreateFileW GetFileAttributesW GetModuleHandleA OpenProcess Sleep GetLastError CloseHandle GetProcAddress GetCurrentProcessId CreateProcessW WideCharToMultiByte GetSystemTimeAsFileTime FormatMessageA QueryPerformanceCounter SetDllDirectoryW LoadLibraryExW GetExitCodeProcess GetCurrentThreadId InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW HeapSize RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetCurrentProcess ExitProcess FreeLibrary GetModuleHandleExW IsProcessorFeaturePresent GetCommandLineA RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc MultiByteToWideChar HeapFree VirtualProtect LCMapStringW GetFileType GetStringTypeW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx

Name

.text

Size

138KB

Virtual Size

138KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11.3MB

Virtual Size

11.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

167KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_77067af49942eb19bc1330a03740c4b0_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom

shell32

kernel32

generic