General
- Target 2026-08-20_69c70ff2ef21e8ac8d6e08f2bb3a8ff3_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom
- Size 11.5MB
- Sample260821-de23ms1frb
- SHA256 d3c4501eda67680971b9b493bf0e01cbf2d107ea914640c62d89b4f777321daf
- MD5 69c70ff2ef21e8ac8d6e08f2bb3a8ff3
- SHA1 56bdf546fe3e1790f2e07a5cb8dbd3b854115bcb
- SHA512 6e224161725eb427597fe133fc2f0382a9bf3e5fe7d52ce93af25dc0bb95a2fd71a8d62a07a305f2c58b412a2158907b4dc8d910d3d65434e4595e616e4e224e
- SSDEEP 196608:krxw7JAxQ0MF5TXswcET7uyT8Dpjol+/PbalLd+FLuaPETCNoAqk1goUzJRSjy:fAxQTF5GET7bYDZol2PbwogvTCNoAqks
- TLSH T104C63308818B51E6DA4FD535969318D7FAF278A72B529ADFC3F1C1661F3B1C09C32A12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_69c70ff2ef21e8ac8d6e08f2bb3a8ff3_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_69c70ff2ef21e8ac8d6e08f2bb3a8ff3_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_69c70ff2ef21e8ac8d6e08f2bb3a8ff3_blankgrabber_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom
- Size 11.5MB
- SHA256 d3c4501eda67680971b9b493bf0e01cbf2d107ea914640c62d89b4f777321daf
- MD5 69c70ff2ef21e8ac8d6e08f2bb3a8ff3
- SHA1 56bdf546fe3e1790f2e07a5cb8dbd3b854115bcb
- SHA512 6e224161725eb427597fe133fc2f0382a9bf3e5fe7d52ce93af25dc0bb95a2fd71a8d62a07a305f2c58b412a2158907b4dc8d910d3d65434e4595e616e4e224e
- SSDEEP 196608:krxw7JAxQ0MF5TXswcET7uyT8Dpjol+/PbalLd+FLuaPETCNoAqk1goUzJRSjy:fAxQTF5GET7bYDZol2PbwogvTCNoAqks
- TLSH T104C63308818B51E6DA4FD535969318D7FAF278A72B529ADFC3F1C1661F3B1C09C32A12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Loads dropped DLL