General
- Target 2026-11-11_23cdcce67d52ab3c7bf87902c31945ba_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom
- Size 69.9MB
- Sample261113-s8tqpadt6l
- SHA256 2dc89cfa48b299dbdc9e89c5ebcbd955369d3dd89f07af2463c6a06505d335a1
- MD5 23cdcce67d52ab3c7bf87902c31945ba
- SHA1 511b65d8645f2f940a692ac3891ba676b2258d54
- SHA512 b75db168c25ec3c450e6ec809f84804e1745ca6432de78d38d9b0be1ce7c5bc52656f038f9cf06c52e3f3acb55ac1600e2928f1d16cfb7b42c7f28fe607fa04b
- SSDEEP 1572864:mObPG6ypmWVfdTM0XlRtaNU0sw1T2YWqIywYrAgvv/83F2rgXQl:NbhSmIFM0Vn8ns6GB0vX8Vs
- TLSH T1C6F73338E451C9F3EDCB8134C4962FA666C62C5527E042A303A0F19EB9774D81EBBF59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-11_23cdcce67d52ab3c7bf87902c31945ba_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-11_23cdcce67d52ab3c7bf87902c31945ba_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-11_23cdcce67d52ab3c7bf87902c31945ba_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom
- Size 69.9MB
- SHA256 2dc89cfa48b299dbdc9e89c5ebcbd955369d3dd89f07af2463c6a06505d335a1
- MD5 23cdcce67d52ab3c7bf87902c31945ba
- SHA1 511b65d8645f2f940a692ac3891ba676b2258d54
- SHA512 b75db168c25ec3c450e6ec809f84804e1745ca6432de78d38d9b0be1ce7c5bc52656f038f9cf06c52e3f3acb55ac1600e2928f1d16cfb7b42c7f28fe607fa04b
- SSDEEP 1572864:mObPG6ypmWVfdTM0XlRtaNU0sw1T2YWqIywYrAgvv/83F2rgXQl:NbhSmIFM0Vn8ns6GB0vX8Vs
- TLSH T1C6F73338E451C9F3EDCB8134C4962FA666C62C5527E042A303A0F19EB9774D81EBBF59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables Discord URL observed in first stage droppers
Executes dropped EXE
Loads dropped DLL