General
- Target 2026-09-08_283fc86b2cef4af5ac6d3e03906f6701_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 61.8MB
- Sample260910-hmkksahm2w
- SHA256 e9f8c2d0b9eef8ccdb3f36d29ab457ba1fe6cac0eac03f381edb0ca280f6ea3c
- MD5 283fc86b2cef4af5ac6d3e03906f6701
- SHA1 2d6beb36c7d5d09603afdb4a72f4a91240dae1bd
- SHA512 0395ef472b387b2e390b0ffbf58e2ba5e15ceb94d185c7f2a6dcc53f76311a4bb14298d8c72df304ed55da059c1c3b5c9ecb9e952a8b738cbc939c52a28e3e48
- SSDEEP 1572864:S0axo+XpaazmCL+8N/wWm35ViMGEguBvV2JIDb:S0H8aazmt8X45Fg4D
- TLSH T128E73365DB89A137EAD9173889E1166723B3AE172B00C0A34662F47DFD39FD17A30325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_283fc86b2cef4af5ac6d3e03906f6701_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_283fc86b2cef4af5ac6d3e03906f6701_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_283fc86b2cef4af5ac6d3e03906f6701_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 61.8MB
- SHA256 e9f8c2d0b9eef8ccdb3f36d29ab457ba1fe6cac0eac03f381edb0ca280f6ea3c
- MD5 283fc86b2cef4af5ac6d3e03906f6701
- SHA1 2d6beb36c7d5d09603afdb4a72f4a91240dae1bd
- SHA512 0395ef472b387b2e390b0ffbf58e2ba5e15ceb94d185c7f2a6dcc53f76311a4bb14298d8c72df304ed55da059c1c3b5c9ecb9e952a8b738cbc939c52a28e3e48
- SSDEEP 1572864:S0axo+XpaazmCL+8N/wWm35ViMGEguBvV2JIDb:S0H8aazmt8X45Fg4D
- TLSH T128E73365DB89A137EAD9173889E1166723B3AE172B00C0A34662F47DFD39FD17A30325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Loads dropped DLL