General
- Target 2026-08-25_911c32ecc2612964d6a0cd3597acc5d8_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 8.4MB
- Sample260826-vz93esee42
- SHA256 0062d75043c367a66f2128b5dbd20b987df429c538e5ee2417bb65c75388b802
- MD5 911c32ecc2612964d6a0cd3597acc5d8
- SHA1 4b2bf81fae2e1c242ca13b4a9fddbe48b4bc1e02
- SHA512 0ddc1d5a278b030e707fa5ebcf78a83b5e15a4990eef89f8efaa9be41cca9a7471a0f8a334925471f321e6b0ef5937d1e655bb12f844457510ced5db27b338f5
- SSDEEP 196608:8lCr7+WXbUjGPdkUnFIQQHujBwUUcMZ5P6GlZd/Z1FhDJW0c:8lCv+abUjgFIIKOMZ5ZdhbhDU
- TLSH T1BD9633A4B6F104EEDEABD33570A06672B762F859136402FF539841D42F66BD28E73321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_911c32ecc2612964d6a0cd3597acc5d8_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_911c32ecc2612964d6a0cd3597acc5d8_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_911c32ecc2612964d6a0cd3597acc5d8_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 8.4MB
- SHA256 0062d75043c367a66f2128b5dbd20b987df429c538e5ee2417bb65c75388b802
- MD5 911c32ecc2612964d6a0cd3597acc5d8
- SHA1 4b2bf81fae2e1c242ca13b4a9fddbe48b4bc1e02
- SHA512 0ddc1d5a278b030e707fa5ebcf78a83b5e15a4990eef89f8efaa9be41cca9a7471a0f8a334925471f321e6b0ef5937d1e655bb12f844457510ced5db27b338f5
- SSDEEP 196608:8lCr7+WXbUjGPdkUnFIQQHujBwUUcMZ5P6GlZd/Z1FhDJW0c:8lCv+abUjgFIIKOMZ5ZdhbhDU
- TLSH T1BD9633A4B6F104EEDEABD33570A06672B762F859136402FF539841D42F66BD28E73321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Loads dropped DLL