General
- Target 2026-08-27_bfc1e737aeb5de5d9bba388ae2a1b2f8_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 47.0MB
- Sample260827-la2kbasdmb
- SHA256 d678f92f067da2a39ab28d123b62b7499588680bda4bc562479d4ea9312926b5
- MD5 bfc1e737aeb5de5d9bba388ae2a1b2f8
- SHA1 02d166fb8dafa1e64d71a356b655abdd7b9e674f
- SHA512 bc17fb4fea2d0a5d7b26520d0c537da2874a658e07e1c780d88cf29b3eb7c6613b7362a223293817cf8caa393a1a04bad7cd2c06139772df610a5cb321346bd1
- SSDEEP 786432:bmSLQkK5NFTDU8UGmYVi33ov4/1lyd2npdnvPSGzMxOJPhV8XD3BfYAJ:t8kGNF3U8rGg4d4duvqEP8T3hYAJ
- TLSH T11BB733FA723AC6E9D98B82F9D9E94A685B71309B06C4CDFB56130FE00719BC01635B53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_bfc1e737aeb5de5d9bba388ae2a1b2f8_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_bfc1e737aeb5de5d9bba388ae2a1b2f8_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_bfc1e737aeb5de5d9bba388ae2a1b2f8_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 47.0MB
- SHA256 d678f92f067da2a39ab28d123b62b7499588680bda4bc562479d4ea9312926b5
- MD5 bfc1e737aeb5de5d9bba388ae2a1b2f8
- SHA1 02d166fb8dafa1e64d71a356b655abdd7b9e674f
- SHA512 bc17fb4fea2d0a5d7b26520d0c537da2874a658e07e1c780d88cf29b3eb7c6613b7362a223293817cf8caa393a1a04bad7cd2c06139772df610a5cb321346bd1
- SSDEEP 786432:bmSLQkK5NFTDU8UGmYVi33ov4/1lyd2npdnvPSGzMxOJPhV8XD3BfYAJ:t8kGNF3U8rGg4d4duvqEP8T3hYAJ
- TLSH T11BB733FA723AC6E9D98B82F9D9E94A685B71309B06C4CDFB56130FE00719BC01635B53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger