General
- Target 2026-07-01_d88406b71b1ecc3282682f25007471ac_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 7.9MB
- Sample260701-jattcsa16z
- SHA256 8c6e7cb13075051d43c47ce08f5660754e6ef92223a851853b135edfb9372105
- MD5 d88406b71b1ecc3282682f25007471ac
- SHA1 37052610713ecca6bc6df0e4cc29ab411ca10e5a
- SHA512 a301cf844e22bfe0a6bd791453f48a5a2984a26bdc2fe17965f0e61d90de792d988b01f29cfd322214a3bccbfdc85b079b06d487fb1523715924ba527b77ab6f
- SSDEEP 196608:z0Mgn1QbgOv2f55m59DCjUmpfQM+e9Qc/xtZGxX8xJU:Y71D7Q5QgmtQMX2c/xtZGxX8rU
- TLSH T1208633B4A59104F7ECE3427EC49AC079C631AC6A9720C1CF1790665B3FA76CC593BBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-01_d88406b71b1ecc3282682f25007471ac_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_d88406b71b1ecc3282682f25007471ac_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_d88406b71b1ecc3282682f25007471ac_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 7.9MB
- SHA256 8c6e7cb13075051d43c47ce08f5660754e6ef92223a851853b135edfb9372105
- MD5 d88406b71b1ecc3282682f25007471ac
- SHA1 37052610713ecca6bc6df0e4cc29ab411ca10e5a
- SHA512 a301cf844e22bfe0a6bd791453f48a5a2984a26bdc2fe17965f0e61d90de792d988b01f29cfd322214a3bccbfdc85b079b06d487fb1523715924ba527b77ab6f
- SSDEEP 196608:z0Mgn1QbgOv2f55m59DCjUmpfQM+e9Qc/xtZGxX8xJU:Y71D7Q5QgmtQMX2c/xtZGxX8rU
- TLSH T1208633B4A59104F7ECE3427EC49AC079C631AC6A9720C1CF1790665B3FA76CC593BBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.