General
- Target 2026-06-26_0955029f0ca5902bd56de03338db79a3_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 45.1MB
- Sample260629-w2w41sdx2k
- SHA256 65ac914a7570cb2477f98f120b125906e55244db3fdaa6da89f30db2523acfe7
- MD5 0955029f0ca5902bd56de03338db79a3
- SHA1 020e2417889748430c3b42862e546da9222532cf
- SHA512 24be4d63e323f06fc29ef5ed6da90f1dcbfae3827d77208c01015e4250652a8c7c5fb54dbbb3eea6a90360003d9e0e18a6670e20a45a80c65ab5518f1823c04a
- SSDEEP 786432:a3GwSEGCshsW8rzbWlA68kavOjTNGCgeNVteM5Fcql48KYo233FCy52YNDJMYQVG:/wSEUsWezbWm6RavK4cNVtvzcqlmt23X
- TLSH T18BA733446B462529F4D9C239E2E6C877A59134EB1325C4EB03B04E5B1F1B2EAFD36F60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-06-26_0955029f0ca5902bd56de03338db79a3_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_0955029f0ca5902bd56de03338db79a3_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_0955029f0ca5902bd56de03338db79a3_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 45.1MB
- SHA256 65ac914a7570cb2477f98f120b125906e55244db3fdaa6da89f30db2523acfe7
- MD5 0955029f0ca5902bd56de03338db79a3
- SHA1 020e2417889748430c3b42862e546da9222532cf
- SHA512 24be4d63e323f06fc29ef5ed6da90f1dcbfae3827d77208c01015e4250652a8c7c5fb54dbbb3eea6a90360003d9e0e18a6670e20a45a80c65ab5518f1823c04a
- SSDEEP 786432:a3GwSEGCshsW8rzbWlA68kavOjTNGCgeNVteM5Fcql48KYo233FCy52YNDJMYQVG:/wSEUsWezbWm6RavK4cNVtvzcqlmt23X
- TLSH T18BA733446B462529F4D9C239E2E6C877A59134EB1325C4EB03B04E5B1F1B2EAFD36F60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.