General
- Target 2026-07-02_f1ccf18475518362c109967230f2a101_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 13.9MB
- Sample260702-xtt55acz4x
- SHA256 5cc78445e1918d9adf768fecf7ad87e5b79023daa7ae77bdd77cd4539cf881be
- MD5 f1ccf18475518362c109967230f2a101
- SHA1 24eeb38c63bed5bc88f3beabfb273267cd5c0f8d
- SHA512 fa45203d3a1d5c84591cf0902fbe3eb966f8c89989386768045aba400ace1eb4d0957a64e9e374103fd51893db614860bbfca1dff954388e8099337f70299bfb
- SSDEEP 393216:WZqmhLM9PDXEAphVtnIUQSg+9/iZuatBPvF7dvplT:iqO49LRphDto+piZZtpvF7Z
- TLSH T148E6336CBBC149B6F8F7413C5D60D951E2F2B5822F65D1FF0BA00A562E3B6E44E39290
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-02_f1ccf18475518362c109967230f2a101_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_f1ccf18475518362c109967230f2a101_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 13.9MB
- SHA256 5cc78445e1918d9adf768fecf7ad87e5b79023daa7ae77bdd77cd4539cf881be
- MD5 f1ccf18475518362c109967230f2a101
- SHA1 24eeb38c63bed5bc88f3beabfb273267cd5c0f8d
- SHA512 fa45203d3a1d5c84591cf0902fbe3eb966f8c89989386768045aba400ace1eb4d0957a64e9e374103fd51893db614860bbfca1dff954388e8099337f70299bfb
- SSDEEP 393216:WZqmhLM9PDXEAphVtnIUQSg+9/iZuatBPvF7dvplT:iqO49LRphDto+piZZtpvF7Z
- TLSH T148E6336CBBC149B6F8F7413C5D60D951E2F2B5822F65D1FF0BA00A562E3B6E44E39290
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.