General
- Target 2026-09-24_9b70bb1de72e19e46f79fa242da62b72_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 6.0MB
- Sample260924-dtsgrach29
- SHA256 86b0ae460af09ec4a238c5415217e555a6bcbefad6e8381d8943dc6e2ec100b3
- MD5 9b70bb1de72e19e46f79fa242da62b72
- SHA1 e36e06b91e9e85b4224ab98242bd18f53b4181fe
- SHA512 add2803de1de54b2e3206d8ed62dd1ad0451bf31267937caad03555339c66f1e3eb21fb8eefe76f7aec9c0b3866b15885c4af95ceaf5deadae31026e85870167
- SSDEEP 98304:vQJVBNPk0N7q4jvULlPEPXmmE+KyT1yUedH44hM2RvQbrxoPyrJsXf6gTQH6RJzS:YJTN80N7q4wF+KuedHxjNQbrxlsSgTlC
- TLSH T12C56330A70E621F4C12FA238E490165AF3273CE51B14DADF9368B5591E633E19E33B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_9b70bb1de72e19e46f79fa242da62b72_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_9b70bb1de72e19e46f79fa242da62b72_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_9b70bb1de72e19e46f79fa242da62b72_blankgrabber_cobalt-strike_coinminer_icedid_njrat_satacom
- Size 6.0MB
- SHA256 86b0ae460af09ec4a238c5415217e555a6bcbefad6e8381d8943dc6e2ec100b3
- MD5 9b70bb1de72e19e46f79fa242da62b72
- SHA1 e36e06b91e9e85b4224ab98242bd18f53b4181fe
- SHA512 add2803de1de54b2e3206d8ed62dd1ad0451bf31267937caad03555339c66f1e3eb21fb8eefe76f7aec9c0b3866b15885c4af95ceaf5deadae31026e85870167
- SSDEEP 98304:vQJVBNPk0N7q4jvULlPEPXmmE+KyT1yUedH44hM2RvQbrxoPyrJsXf6gTQH6RJzS:YJTN80N7q4wF+KuedHxjNQbrxlsSgTlC
- TLSH T12C56330A70E621F4C12FA238E490165AF3273CE51B14DADF9368B5591E633E19E33B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables Discord URL observed in first stage droppers
-
Loads dropped DLL