General
- Target 2026-06-25_e2a0534afae0cc46dc7c6497313d2585_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 17.4MB
- Sample260629-x2eemsdv7w
- SHA256 307baeb1fade424bd36510d183d7bd697497a4be777a16dddf93563e07b72f5f
- MD5 e2a0534afae0cc46dc7c6497313d2585
- SHA1 7173146c1b7727f83187e2ac0681984c2465b8e3
- SHA512 ac7ec2f574eb8f099c288f6bc600b68a04605890de3f41a74eb0ed3b398c927bde1f3e9fdc5f2f1e513c26f3c7542f944692bb418b27226f4e2c7d11dec0849a
- SSDEEP 393216:yjeB9MNLRAP/7cfZpoenawrlWDatuwS0zInEroXq14S2CDqc9jf0Qkr:yjew7I7yZhlKaoz0MErUlpcf0
- TLSH T11907338ABBB849BED55ED038C4B4924282F270B187A851DB1FAD4E216D673E1FF34714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
2026-06-25_e2a0534afae0cc46dc7c6497313d2585_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_e2a0534afae0cc46dc7c6497313d2585_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_e2a0534afae0cc46dc7c6497313d2585_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 17.4MB
- SHA256 307baeb1fade424bd36510d183d7bd697497a4be777a16dddf93563e07b72f5f
- MD5 e2a0534afae0cc46dc7c6497313d2585
- SHA1 7173146c1b7727f83187e2ac0681984c2465b8e3
- SHA512 ac7ec2f574eb8f099c288f6bc600b68a04605890de3f41a74eb0ed3b398c927bde1f3e9fdc5f2f1e513c26f3c7542f944692bb418b27226f4e2c7d11dec0849a
- SSDEEP 393216:yjeB9MNLRAP/7cfZpoenawrlWDatuwS0zInEroXq14S2CDqc9jf0Qkr:yjew7I7yZhlKaoz0MErUlpcf0
- TLSH T11907338ABBB849BED55ED038C4B4924282F270B187A851DB1FAD4E216D673E1FF34714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Loads dropped DLL
-
Adds Run key to start application