General
- Target 2026-09-13_3c0d9d38e27e6228322020fbf69d161c_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom
- Size 24.3MB
- Sample260913-tl6bmsak4s
- SHA256 0f27468fd35a500964c3a0571e662d57acefb1435ac40337aa2abfaea83cde8c
- MD5 3c0d9d38e27e6228322020fbf69d161c
- SHA1 34bbf96175afdc7863d142d099dcd75c94af4629
- SHA512 7348bf2f0166f642516ff852ddaae61f008b02f98debfca933112f5fd39b90c1b75aae3e207491106ee8f6f8e02e43a1a68eafd862a3e1859db3f9063450400f
- SSDEEP 786432:DRUv9s9XFdbrnIfDZGEkqB8uJEXLpu+cu:DGv9sBTbgDggbEXsp
- TLSH T16C473370B4925EE4E07697B894CC4F4DF7A0BA985761D4EB672288F93637AF012397C0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-13_3c0d9d38e27e6228322020fbf69d161c_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_3c0d9d38e27e6228322020fbf69d161c_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_3c0d9d38e27e6228322020fbf69d161c_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom
- Size 24.3MB
- SHA256 0f27468fd35a500964c3a0571e662d57acefb1435ac40337aa2abfaea83cde8c
- MD5 3c0d9d38e27e6228322020fbf69d161c
- SHA1 34bbf96175afdc7863d142d099dcd75c94af4629
- SHA512 7348bf2f0166f642516ff852ddaae61f008b02f98debfca933112f5fd39b90c1b75aae3e207491106ee8f6f8e02e43a1a68eafd862a3e1859db3f9063450400f
- SSDEEP 786432:DRUv9s9XFdbrnIfDZGEkqB8uJEXLpu+cu:DGv9sBTbgDggbEXsp
- TLSH T16C473370B4925EE4E07697B894CC4F4DF7A0BA985761D4EB672288F93637AF012397C0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Loads dropped DLL