General
- Target 2026-07-03_81e14bae53f4162f70be724e5d5727ea_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 15.7MB
- Sample260703-rewshsaw4y
- SHA256 fe32e0bd288da16a109a358688f7088a305e81b40d9daa7ab0bb703e8873eebd
- MD5 81e14bae53f4162f70be724e5d5727ea
- SHA1 3c71bb1c61ab8eed1e7865a691192a334f942b3b
- SHA512 7167cf94f60ddc3bbda3e05da4d2e53722017c6481b2360c9003a0f4f762e72e6534a46b0a5676432f190226429c64b809de65d4f83ca2bdcb9d728f6ffea343
- SSDEEP 393216:m85vzLoW8ELeJnP31+TtIiFq8uARuAtgFXmPdS9QV8ax644EpW7hNIS:R5vzMW8EQ/1QtI18uAaKsM8ax644Eg7p
- TLSH T136F6339573A208E9D8D9D23B96DBC22BA79134F64319D2C757E00E032E172E4EE39F51
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-03_81e14bae53f4162f70be724e5d5727ea_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_81e14bae53f4162f70be724e5d5727ea_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260630-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_81e14bae53f4162f70be724e5d5727ea_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 15.7MB
- SHA256 fe32e0bd288da16a109a358688f7088a305e81b40d9daa7ab0bb703e8873eebd
- MD5 81e14bae53f4162f70be724e5d5727ea
- SHA1 3c71bb1c61ab8eed1e7865a691192a334f942b3b
- SHA512 7167cf94f60ddc3bbda3e05da4d2e53722017c6481b2360c9003a0f4f762e72e6534a46b0a5676432f190226429c64b809de65d4f83ca2bdcb9d728f6ffea343
- SSDEEP 393216:m85vzLoW8ELeJnP31+TtIiFq8uARuAtgFXmPdS9QV8ax644EpW7hNIS:R5vzMW8EQ/1QtI18uAaKsM8ax644Eg7p
- TLSH T136F6339573A208E9D8D9D23B96DBC22BA79134F64319D2C757E00E032E172E4EE39F51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.