General
- Target 2026-07-03_bb0d36c43227e51b14b601215bf59554_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 8.3MB
- Sample260703-q61ecaat41
- SHA256 28723d8d2b67fd8ab2818d9327ab5846dbc010366417f16a21c011affe71e4df
- MD5 bb0d36c43227e51b14b601215bf59554
- SHA1 51c64a4f64721d38cdc96f15ace96c8b7636ac49
- SHA512 047902d3325aafbe3c1b5e0a84d89e9089c30f15a3fd43119ef3875d8ae5ffd12764c597dffa6e0970bdb7ded1196680c095a4a387c20c93c16020923aed337b
- SSDEEP 196608:U4XNTwhLgBzA1HeT39IigwTauDXURuAEk0ax8ZLE3:zgLgBc1+TtIiF2uARuAUax6LE3
- TLSH T15B9633A493F204E8E9A6C13D81BAC26DD222785B5756D3CB27D00A973F23BF14939F51
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-03_bb0d36c43227e51b14b601215bf59554_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_bb0d36c43227e51b14b601215bf59554_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_bb0d36c43227e51b14b601215bf59554_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 8.3MB
- SHA256 28723d8d2b67fd8ab2818d9327ab5846dbc010366417f16a21c011affe71e4df
- MD5 bb0d36c43227e51b14b601215bf59554
- SHA1 51c64a4f64721d38cdc96f15ace96c8b7636ac49
- SHA512 047902d3325aafbe3c1b5e0a84d89e9089c30f15a3fd43119ef3875d8ae5ffd12764c597dffa6e0970bdb7ded1196680c095a4a387c20c93c16020923aed337b
- SSDEEP 196608:U4XNTwhLgBzA1HeT39IigwTauDXURuAEk0ax8ZLE3:zgLgBc1+TtIiF2uARuAUax6LE3
- TLSH T15B9633A493F204E8E9A6C13D81BAC26DD222785B5756D3CB27D00A973F23BF14939F51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.