General
- Target 2026-10-21_929cceb773e87c08b6023bb6c4717962_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 22.1MB
- Sample261022-vnlkpaws4k
- SHA256 dd5592987b5ef280dced45ec1c5fd24e8867fa9be75396459a098f924a043505
- MD5 929cceb773e87c08b6023bb6c4717962
- SHA1 89c7fe83118a8c32910e69e30904eba3e00ef03d
- SHA512 850d209be10c85b8e418432a1b353b793acd1ef485f9b6f9b4844150c0616269ab123f65e00e2f64e42576a9e382f028019708799348a16a9af0c2dd3a803d96
- SSDEEP 393216:rEvzdSyOGC7MZFY9/xX7WpcOtO18/35at+o3Yn14iJVQbd+kE3cW6uVUnn:yzdSy3C7oYv7WS+Oi35at+oontPkabs
- TLSH T1F43733667A309E74F1AED034AD6B823651E26B27271163DF4B22F0D5EF136F92D39201
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-21_929cceb773e87c08b6023bb6c4717962_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_929cceb773e87c08b6023bb6c4717962_blankgrabber_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_929cceb773e87c08b6023bb6c4717962_blankgrabber_cobalt-strike_icedid_njrat_satacom
- Size 22.1MB
- SHA256 dd5592987b5ef280dced45ec1c5fd24e8867fa9be75396459a098f924a043505
- MD5 929cceb773e87c08b6023bb6c4717962
- SHA1 89c7fe83118a8c32910e69e30904eba3e00ef03d
- SHA512 850d209be10c85b8e418432a1b353b793acd1ef485f9b6f9b4844150c0616269ab123f65e00e2f64e42576a9e382f028019708799348a16a9af0c2dd3a803d96
- SSDEEP 393216:rEvzdSyOGC7MZFY9/xX7WpcOtO18/35at+o3Yn14iJVQbd+kE3cW6uVUnn:yzdSy3C7oYv7WS+Oi35at+oontPkabs
- TLSH T1F43733667A309E74F1AED034AD6B823651E26B27271163DF4B22F0D5EF136F92D39201
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Possible privilege escalation attempt
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Suspicious use of NtSetInformationThreadHideFromDebugger