General
- Target 2026-08-22_c1822438fe33f9dbb0e28bc51e5366b0_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 31.0MB
- Sample260822-d48ays1ama
- SHA256 80d71e18e465b0db63598b0aad5fbe83c23ff8ad07076536e9c83e484a85bc21
- MD5 c1822438fe33f9dbb0e28bc51e5366b0
- SHA1 2db4959a0d90d76a55928ef795647d562608fd6c
- SHA512 1410c94154a3e0d22e6e8fbfe270f09c8853b09c91a673ac57d5ffb040a46a175f8082e076f39919a7d85e6894beab89b7435c7e2e24cb2492a659ae2192f102
- SSDEEP 786432:B4k5VYby9G1kS5OHBFvxHbbJybU/gWf4T2LOCM4qy4:Gk5ubOqkS5MRxHbbgby8Cq1
- TLSH T113673323B0D24D70DCDBE939F9910735CDA0BA223B0183EB59A5E64C6B66CC61F1572B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_c1822438fe33f9dbb0e28bc51e5366b0_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_c1822438fe33f9dbb0e28bc51e5366b0_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_c1822438fe33f9dbb0e28bc51e5366b0_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 31.0MB
- SHA256 80d71e18e465b0db63598b0aad5fbe83c23ff8ad07076536e9c83e484a85bc21
- MD5 c1822438fe33f9dbb0e28bc51e5366b0
- SHA1 2db4959a0d90d76a55928ef795647d562608fd6c
- SHA512 1410c94154a3e0d22e6e8fbfe270f09c8853b09c91a673ac57d5ffb040a46a175f8082e076f39919a7d85e6894beab89b7435c7e2e24cb2492a659ae2192f102
- SSDEEP 786432:B4k5VYby9G1kS5OHBFvxHbbJybU/gWf4T2LOCM4qy4:Gk5ubOqkS5MRxHbbgby8Cq1
- TLSH T113673323B0D24D70DCDBE939F9910735CDA0BA223B0183EB59A5E64C6B66CC61F1572B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects executables containing URLs to raw contents of a Github gist
-
Loads dropped DLL