General
- Target 2026-08-30_2652a51f57f2af9899a4a38df9c3990d_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 16.6MB
- Sample260830-y6cmaayfqf
- SHA256 ccf06d088ba3a406e6a00229eb2b423cc50ecfb8fe0182189f0001df818fac22
- MD5 2652a51f57f2af9899a4a38df9c3990d
- SHA1 c12b1a1b1a26736fb361f377a6bf18858b31e906
- SHA512 8f51f71f0416e34ecacab8ebb7415d43c7c98f3a502e7176f4d65eeeb72ee52914e04382027766d8cf1e52c2bd1b6823b480835f5b9e8274ad9b2856bf30a1d7
- SSDEEP 393216:bdTnmgn8AYqJpKcYqurwzIPGFpNau8wfxZJqfiCS:bdD2yJMquMzIPGVau8KxqiCS
- TLSH T131073328F37216A8FA21B37A48810EA7EB35383553598FE7019161DA7F3F7E81935B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_2652a51f57f2af9899a4a38df9c3990d_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_2652a51f57f2af9899a4a38df9c3990d_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_2652a51f57f2af9899a4a38df9c3990d_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 16.6MB
- SHA256 ccf06d088ba3a406e6a00229eb2b423cc50ecfb8fe0182189f0001df818fac22
- MD5 2652a51f57f2af9899a4a38df9c3990d
- SHA1 c12b1a1b1a26736fb361f377a6bf18858b31e906
- SHA512 8f51f71f0416e34ecacab8ebb7415d43c7c98f3a502e7176f4d65eeeb72ee52914e04382027766d8cf1e52c2bd1b6823b480835f5b9e8274ad9b2856bf30a1d7
- SSDEEP 393216:bdTnmgn8AYqJpKcYqurwzIPGFpNau8wfxZJqfiCS:bdD2yJMquMzIPGVau8KxqiCS
- TLSH T131073328F37216A8FA21B37A48810EA7EB35383553598FE7019161DA7F3F7E81935B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.