Overview

overview

7

Static

static

3

2026-08-25...om.exe

windows10-2004-x64

7

2026-08-25...om.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    147s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    26/08/2026, 03:52

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-25_eb11576adc8c9bf116492668e69cc4c0_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
  • Size 6.1MB
  • Sample260826-efdbcabf27
  • SHA256 552d4d4f58155679890dd4a873eea8958c9a6725a4af50adc51df4c3a3992a7e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 5 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 6 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-25_eb11576adc8c9bf116492668e69cc4c0_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-25_eb11576adc8c9bf116492668e69cc4c0_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe"
    1⤵
    • Modifies registry class
    • Suspicious use of WriteProcessMemory
    PID:4420
    • C:\Users\Admin\AppData\Local\Temp\2026-08-25_eb11576adc8c9bf116492668e69cc4c0_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
      C:\Users\Admin\AppData\Local\Temp\2026-08-25_eb11576adc8c9bf116492668e69cc4c0_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
      2⤵
      • Loads dropped DLL
      PID:3392

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4420_514310_EgxB0bctpaQ\VCRUNTIME140.dll
        • Size 116KB
        • SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4420_514310_EgxB0bctpaQ\_bz2.pyd
        • Size 83KB
        • SHA256 f81dc49eac5ecc528e628175add2ff6bda695a93ea76671d7187155aa6326abb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4420_514310_EgxB0bctpaQ\_lzma.pyd
        • Size 156KB
        • SHA256 a6e2a5bb7a33ad9054f178786a031a46ea560faeef1fb96259331500aae9154c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python312.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4420_514310_EgxB0bctpaQ\python312.dll
        • Size 6.6MB
        • SHA256 c98ba3354a7d1f69bdca42560feec933ccba93afcc707391049a065e1079cddb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        stub.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_4420_514310_EgxB0bctpaQ\stub.dll
        • Size 6.5MB
        • SHA256 2a5e8c6eb9f4c4b8399c06acd87f1e757cb54d1808ab9ff218db0a455238cb93
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download