2026-10-22_64da518d0fa13bce89724d9f043f8d55_blankgrabber_cobalt-strike_icedid_njrat_satacom_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_64da518d0fa13bce89724d9f043f8d55_blankgrabber_cobalt-strike_icedid_njrat_satacom_stealc
Size 11.8MB
Sample261024-mtp63ayv9n
SHA256 8acd84ecc290afe5246772241222912e4fba43c0432d29796e7fed267498481d
MD5 64da518d0fa13bce89724d9f043f8d55
SHA1 2d453903adbb05bb64a84f55cea404292dc3fbdb
SHA512 1aaa61d9834341ceda3d942b2957f7d2594fd6b3f30a07dc563285323df5799e16fd52bbecbc5f1516452dd5fd4cc7b2497fa343a898c14ac46e483a1044a777
SSDEEP 98304:QuzhApdC9W2kGNIRBDOG9aufmNJYkjCnYMIm3HlSvM:Quz1WZGNIRd7eNJYkjCn5Im30vM
TLSH
T141C6D043B3D98699D017A6388767D717F371B824032583DBBBC4496EEE6B5E08B3A740
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_64da518d0fa13bce89724d9f043f8d55_blankgrabber_cobalt-strike_icedid_njrat_satacom_stealc

File Explorer

2026-10-22_64da518d0fa13bce89724d9f043f8d55_blankgrabber_cobalt-strike_icedid_njrat_satacom_stealc

.exe 11.8MB

2026-10-22_64da518d0fa13bce89724d9f043f8d55_blankgrabber_cobalt-strike_icedid_njrat_satacom_stealc

IMPHASH d2cc47fedcf797621ea203cfa8be4326
SHA256 8acd84ecc290afe5246772241222912e4fba43c0432d29796e7fed267498481d
MD5 64da518d0fa13bce89724d9f043f8d55
SHA1 2d453903adbb05bb64a84f55cea404292dc3fbdb
SHA512 1aaa61d9834341ceda3d942b2957f7d2594fd6b3f30a07dc563285323df5799e16fd52bbecbc5f1516452dd5fd4cc7b2497fa343a898c14ac46e483a1044a777
SSDEEP 98304:QuzhApdC9W2kGNIRBDOG9aufmNJYkjCnYMIm3HlSvM:Quz1WZGNIRd7eNJYkjCn5Im30vM
TLSH
T141C6D043B3D98699D017A6388767D717F371B824032583DBBBC4496EEE6B5E08B3A740
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1132336

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\velocity-main\bin\trash\obj\Loader\Release\x64\K91Qb8FUVUCMvmvb.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

bcrypt

BCryptCreateHash BCryptOpenAlgorithmProvider BCryptGetProperty BCryptCloseAlgorithmProvider BCryptFinishHash BCryptHashData BCryptDestroyHash

advapi32

RegGetValueW RegCloseKey RegCreateKeyExW RegSetValueExW

kernel32

IsValidCodePage GetACP GetOEMCP SizeofResource WriteFile RemoveDirectoryW GetTempPathW CreateFileW CreateToolhelp32Snapshot Process32NextW LockResource DeleteFileW Process32FirstW CloseHandle LoadResource FindResourceW GetModuleHandleW WideCharToMultiByte FlushFileBuffers GlobalAlloc GlobalLock GlobalUnlock GetLocaleInfoA MultiByteToWideChar LoadLibraryA QueryPerformanceFrequency GetProcAddress FreeLibrary QueryPerformanceCounter GlobalFree Process32First WriteProcessMemory SetLastError GetCurrentProcess WaitForMultipleObjects WaitForSingleObject OpenProcess CreateEventW GetExitCodeThread GetLastError Process32Next LoadLibraryW ResetEvent Module32FirstW VirtualAllocEx CreateRemoteThread Module32NextW VirtualFreeEx IsWow64Process ReadFile GetFileSizeEx HeapFree CreateFileA HeapReAlloc HeapAlloc CreateFileMappingA GetProcessHeap MapViewOfFile ReadConsoleW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW LoadLibraryExW VirtualProtect GetConsoleMode GetConsoleOutputCP GetFileType SetFilePointerEx UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext GetStdHandle GetModuleFileNameW TerminateProcess ExitProcess IsProcessorFeaturePresent RtlUnwind FlsFree FlsSetValue FlsGetValue FlsAlloc RtlUnwindEx RtlLookupFunctionEntry InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId GetStartupInfoW SetUnhandledExceptionFilter GetCPInfo GetStringTypeW LCMapStringEx DecodePointer GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEndOfFile EncodePointer DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection SetStdHandle HeapSize WriteConsoleW UnmapViewOfFile RtlPcToFileHeader RaiseException GetCurrentDirectoryW CreateDirectoryW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW GetFullPathNameW CreateFile2 AreFileApisANSI GetFileInformationByHandleEx GetCurrentThreadId FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW LocalFree FormatMessageA GetLocaleInfoEx InitOnceComplete InitOnceBeginInitialize ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW

user32

GetCursorPos GetWindowRect SetForegroundWindow GetMessageExtraInfo GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow SetCursor IsWindowUnicode SetCursorPos GetKeyState OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData SetCapture ReleaseCapture GetWindowThreadProcessId IsWindowVisible SetWindowRgn EnumWindows GetWindowTextW DefWindowProcW DispatchMessageA PostQuitMessage LoadCursorA DestroyWindow SetWindowPos MessageBoxW CreateWindowExW ScreenToClient GetSystemMetrics UnregisterClassW RegisterClassExW ShowWindow SetTimer SetLayeredWindowAttributes TranslateMessage GetClientRect PeekMessageA KillTimer

gdi32

GetStockObject CreateRoundRectRgn DeleteObject

shell32

ShellExecuteW

ole32

StringFromGUID2 CoCreateGuid

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

475KB

Virtual Size

475KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

57KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

7.6MB

Virtual Size

7.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_64da518d0fa13bce89724d9f043f8d55_blankgrabber_cobalt-strike_icedid_njrat_satacom_stealc

d3d11

d3dcompiler_47

bcrypt

advapi32

kernel32

user32

gdi32

shell32

ole32

imm32

generic