General
- Target 2026-06-26_a47f989958a0ce89fc5e854a936bb808_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 20.1MB
- Sample260629-qqkzqaev3w
- SHA256 274e98b525d943f3247b2c578cc668b5963daf6843c65921bed3084794e299ae
- MD5 a47f989958a0ce89fc5e854a936bb808
- SHA1 ef1be2ae5d100703d3cd208d2332e6137a03ade8
- SHA512 ba1dfa0a8bd68df2a8e06ddce08d9cd7e01a9af0c2f897307595a4766859b1c933dbc13c3bd308a0d8c05a6a1fa16f446615fcf8ebef620fa701918efd4f47e7
- SSDEEP 393216:fiIE7YoPQts9Z278YHi+2ohcyLkW+eGQRg93iObIhRS/MLQ/1P+2DlXtzec:07rPQts1YHiRyc0kW+e5R49MhR98N9t
- TLSH T154273357816208F6F8D2123E9126C578DA32BC624B70E5CF67F4E9193D47AF18A78F90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-06-26_a47f989958a0ce89fc5e854a936bb808_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_a47f989958a0ce89fc5e854a936bb808_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_a47f989958a0ce89fc5e854a936bb808_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 20.1MB
- SHA256 274e98b525d943f3247b2c578cc668b5963daf6843c65921bed3084794e299ae
- MD5 a47f989958a0ce89fc5e854a936bb808
- SHA1 ef1be2ae5d100703d3cd208d2332e6137a03ade8
- SHA512 ba1dfa0a8bd68df2a8e06ddce08d9cd7e01a9af0c2f897307595a4766859b1c933dbc13c3bd308a0d8c05a6a1fa16f446615fcf8ebef620fa701918efd4f47e7
- SSDEEP 393216:fiIE7YoPQts9Z278YHi+2ohcyLkW+eGQRg93iObIhRS/MLQ/1P+2DlXtzec:07rPQts1YHiRyc0kW+e5R49MhR98N9t
- TLSH T154273357816208F6F8D2123E9126C578DA32BC624B70E5CF67F4E9193D47AF18A78F90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.