General
- Target 2026-07-01_1167e9da4386e9063bd1621f340c51bd_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 25.5MB
- Sample260701-v1vdcscy7y
- SHA256 db130f05af0b2db028f8118fa3c744e09e0ad28039bc35a290bd1ca7d9435e05
- MD5 1167e9da4386e9063bd1621f340c51bd
- SHA1 eb081c2f14e7367f029e07957c3b4e917b5065da
- SHA512 26f527852f158fc5da7303cfa5097f9702827c1fdbdd80982075f5322bb890895b4160d4aa436d7a1739f5f2e6f49ab5649965fa19f11ac2a15996156667b166
- SSDEEP 786432:cYVq7ErUTt3orMxITX1blbAWQiwnBNgF3R/of6L:cYVEE8ghbWwF3R/oS
- TLSH T176473308F6B405C9EAB385389B669974D033795B8FE0D9C707685E3A0FCB3E16D79680
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-01_1167e9da4386e9063bd1621f340c51bd_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_1167e9da4386e9063bd1621f340c51bd_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_1167e9da4386e9063bd1621f340c51bd_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 25.5MB
- SHA256 db130f05af0b2db028f8118fa3c744e09e0ad28039bc35a290bd1ca7d9435e05
- MD5 1167e9da4386e9063bd1621f340c51bd
- SHA1 eb081c2f14e7367f029e07957c3b4e917b5065da
- SHA512 26f527852f158fc5da7303cfa5097f9702827c1fdbdd80982075f5322bb890895b4160d4aa436d7a1739f5f2e6f49ab5649965fa19f11ac2a15996156667b166
- SSDEEP 786432:cYVq7ErUTt3orMxITX1blbAWQiwnBNgF3R/of6L:cYVEE8ghbWwF3R/oS
- TLSH T176473308F6B405C9EAB385389B669974D033795B8FE0D9C707685E3A0FCB3E16D79680
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1