General
- Target 2026-07-02_d2b02e1029b05b85e8fa201b5a557520_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom
- Size 18.5MB
- Sample260702-mz4lmsgv3v
- SHA256 73ad4b589b805538fc050dc5ccdb6b3c262f5b47ff925e1aff86472387b1b281
- MD5 d2b02e1029b05b85e8fa201b5a557520
- SHA1 d86e568ce36c6f917eefcb68126cc914c7df7ad6
- SHA512 11da69bd168b7fd88e436e918f4cbd2a04abdd5d361ebeab2e34ba769702c62e44f339891959a4078c316332e27e3525cdc86489618938e1e1d9363c29bfd629
- SSDEEP 393216:NTa1biodjs14bMgLc9zGdDx4AHvx/hqAbdXQfM6R4RmhFc8HsnvDwHnB20C854:Fz2G4TLcNODdxdYMc3C+gEHBe
- TLSH T1691733690FF15AEBE5D3483D9CB18326F27299212F51C6CF1B6847693E7BAC80C2E115
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-02_d2b02e1029b05b85e8fa201b5a557520_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-07-02_d2b02e1029b05b85e8fa201b5a557520_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe
Resource
win11ltsc2024-20260629-en
Malware Config
Targets
-
- Target 2026-07-02_d2b02e1029b05b85e8fa201b5a557520_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom
- Size 18.5MB
- SHA256 73ad4b589b805538fc050dc5ccdb6b3c262f5b47ff925e1aff86472387b1b281
- MD5 d2b02e1029b05b85e8fa201b5a557520
- SHA1 d86e568ce36c6f917eefcb68126cc914c7df7ad6
- SHA512 11da69bd168b7fd88e436e918f4cbd2a04abdd5d361ebeab2e34ba769702c62e44f339891959a4078c316332e27e3525cdc86489618938e1e1d9363c29bfd629
- SSDEEP 393216:NTa1biodjs14bMgLc9zGdDx4AHvx/hqAbdXQfM6R4RmhFc8HsnvDwHnB20C854:Fz2G4TLcNODdxdYMc3C+gEHBe
- TLSH T1691733690FF15AEBE5D3483D9CB18326F27299212F51C6CF1B6847693E7BAC80C2E115
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Netsh Helper DLL
1