2026-11-11_23cdcce67d52ab3c7bf87902c31945ba_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom

General

Target
2026-11-11_23cdcce67d52ab3c7bf87902c31945ba_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom
Size 69.9MB
Sample261113-s8tqpadt6l
SHA256 2dc89cfa48b299dbdc9e89c5ebcbd955369d3dd89f07af2463c6a06505d335a1
MD5 23cdcce67d52ab3c7bf87902c31945ba
SHA1 511b65d8645f2f940a692ac3891ba676b2258d54
SHA512 b75db168c25ec3c450e6ec809f84804e1745ca6432de78d38d9b0be1ce7c5bc52656f038f9cf06c52e3f3acb55ac1600e2928f1d16cfb7b42c7f28fe607fa04b
SSDEEP 1572864:mObPG6ypmWVfdTM0XlRtaNU0sw1T2YWqIywYrAgvv/83F2rgXQl:NbhSmIFM0Vn8ns6GB0vX8Vs
TLSH
T1C6F73338E451C9F3EDCB8134C4962FA666C62C5527E042A303A0F19EB9774D81EBBF59
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-11_23cdcce67d52ab3c7bf87902c31945ba_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom

File Explorer

2026-11-11_23cdcce67d52ab3c7bf87902c31945ba_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom

.exe 69.9MB

2026-11-11_23cdcce67d52ab3c7bf87902c31945ba_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom

IMPHASH 2c7383de6a2d1b6a0276a7aa97924ca8
SHA256 2dc89cfa48b299dbdc9e89c5ebcbd955369d3dd89f07af2463c6a06505d335a1
MD5 23cdcce67d52ab3c7bf87902c31945ba
SHA1 511b65d8645f2f940a692ac3891ba676b2258d54
SHA512 b75db168c25ec3c450e6ec809f84804e1745ca6432de78d38d9b0be1ce7c5bc52656f038f9cf06c52e3f3acb55ac1600e2928f1d16cfb7b42c7f28fe607fa04b
SSDEEP 1572864:mObPG6ypmWVfdTM0XlRtaNU0sw1T2YWqIywYrAgvv/83F2rgXQl:NbhSmIFM0Vn8ns6GB0vX8Vs
TLSH
T1C6F73338E451C9F3EDCB8134C4962FA666C62C5527E042A303A0F19EB9774D81EBBF59
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

50512

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHGetFolderPathW CommandLineToArgvW

kernel32

LeaveCriticalSection WriteConsoleW CreateDirectoryW SizeofResource SetConsoleCtrlHandler GetCommandLineW GetStdHandle WriteFile GetShortPathNameW TerminateProcess GetModuleFileNameW SetEnvironmentVariableW GetEnvironmentVariableW GetTempPathW FindResourceA WaitForSingleObject CreateFileW UnmapViewOfFile GetLastError LockResource CloseHandle LoadResource GetProcAddress GetFileSize GetCurrentProcessId CreateProcessW WideCharToMultiByte GetSystemTimeAsFileTime FormatMessageA CreateFileMappingW MapViewOfFile SetDllDirectoryW GetExitCodeProcess QueryPerformanceCounter GetCurrentThreadId InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW HeapReAlloc RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetCurrentProcess ExitProcess FreeLibrary GetModuleHandleExW IsProcessorFeaturePresent GetCommandLineA RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc MultiByteToWideChar HeapFree VirtualProtect LoadLibraryExW LCMapStringW GetFileType GetStringTypeW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx HeapSize

Name

.text

Size

135KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

59KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

161KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

69.7MB

Virtual Size

69.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-11_23cdcce67d52ab3c7bf87902c31945ba_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom

shell32

kernel32

generic