General
- Target 2026-06-28_f2229995a969ac55b8e6bc9ac5772073_blankgrabber_cobalt-strike_dosia_glassworm_icedid_njrat_quasar-rat_satacom
- Size 14.4MB
- Sample260628-wlq8tsbs4p
- SHA256 69d1fc481864ee49abe27161ab8145a7cad9833a03f0618fa66817af642956cd
- MD5 f2229995a969ac55b8e6bc9ac5772073
- SHA1 b7fd67af576a1babf727683219d09c5b102d20c9
- SHA512 6f950ef8bb22129e8a0e53e23b5641b18e29b6fc96d88af974990d4cfda63b2da49271ba772eb42e1260e338670b856dd77bedf84aadb2f52cb42f528c0bf216
- SSDEEP 393216:hq3hARzL/l9wppCHbMhFfXEAphVtrQSg+RVZK/vFgtB:hqx8zwYQtRphfo+R7AvFg
- TLSH T150E633ADB3D544FAE8E7883D5D52C92083B3BC622B45D0AB06E04D191F3B4E65E3D5E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
2026-06-28_f2229995a969ac55b8e6bc9ac5772073_blankgrabber_cobalt-strike_dosia_glassworm_icedid_njrat_quasar-rat_satacom.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_f2229995a969ac55b8e6bc9ac5772073_blankgrabber_cobalt-strike_dosia_glassworm_icedid_njrat_quasar-rat_satacom
- Size 14.4MB
- SHA256 69d1fc481864ee49abe27161ab8145a7cad9833a03f0618fa66817af642956cd
- MD5 f2229995a969ac55b8e6bc9ac5772073
- SHA1 b7fd67af576a1babf727683219d09c5b102d20c9
- SHA512 6f950ef8bb22129e8a0e53e23b5641b18e29b6fc96d88af974990d4cfda63b2da49271ba772eb42e1260e338670b856dd77bedf84aadb2f52cb42f528c0bf216
- SSDEEP 393216:hq3hARzL/l9wppCHbMhFfXEAphVtrQSg+RVZK/vFgtB:hqx8zwYQtRphfo+R7AvFg
- TLSH T150E633ADB3D544FAE8E7883D5D52C92083B3BC622B45D0AB06E04D191F3B4E65E3D5E8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE
-
Loads dropped DLL