General
- Target 2026-07-03_8e095e6b298b5f7cd92b789f45fa6fa1_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 10.0MB
- Sample260703-dapazsft8p
- SHA256 67419695b67441f53b806c52986cb7dfe453104b6fa23560c3778cdc9a9f362f
- MD5 8e095e6b298b5f7cd92b789f45fa6fa1
- SHA1 81e509c537f185ad59b0a3d95ebfd6fdaa5a3a4d
- SHA512 1aae68bded70d12bbdbc1beae79d7caa76a8de596784db737b9cb9f00eaab3fb155f8e813b1ae86f20e829b501a0f13d9d2620626fd679163df0feb1dd89630c
- SSDEEP 196608:shShsqlGN6nhcd3weqY0XEpXnH2ph1iut1/1QpL0uQg+JVv6jtK/voKgpVFBZ:m9q3hARL0XEAphVtrQSg+LSZK/vFgtB
- TLSH T12AB6335C67D114FAFCB3803D9991D861D7B2B8912F96D1FB13E00D1A2E376E68E38690
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-03_8e095e6b298b5f7cd92b789f45fa6fa1_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_8e095e6b298b5f7cd92b789f45fa6fa1_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_8e095e6b298b5f7cd92b789f45fa6fa1_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 10.0MB
- SHA256 67419695b67441f53b806c52986cb7dfe453104b6fa23560c3778cdc9a9f362f
- MD5 8e095e6b298b5f7cd92b789f45fa6fa1
- SHA1 81e509c537f185ad59b0a3d95ebfd6fdaa5a3a4d
- SHA512 1aae68bded70d12bbdbc1beae79d7caa76a8de596784db737b9cb9f00eaab3fb155f8e813b1ae86f20e829b501a0f13d9d2620626fd679163df0feb1dd89630c
- SSDEEP 196608:shShsqlGN6nhcd3weqY0XEpXnH2ph1iut1/1QpL0uQg+JVv6jtK/voKgpVFBZ:m9q3hARL0XEAphVtrQSg+LSZK/vFgtB
- TLSH T12AB6335C67D114FAFCB3803D9991D861D7B2B8912F96D1FB13E00D1A2E376E68E38690
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.