General
- Target 2026-07-04_00bcb19e4bedcad4175b8e34e372a1f4_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 12.2MB
- Sample260704-clzenaew7n
- SHA256 ecaec61c10e3018b04a815c1fa7fc215f162ffee75a01bfe9f56a280954d1995
- MD5 00bcb19e4bedcad4175b8e34e372a1f4
- SHA1 cdeb03ea11e8a4fa91edad530475d183a6f4578f
- SHA512 8c2cf4db27066bc30be0bac243accfea46c53fa60d82aba1fb42ceb5c2b939e303a83c6bf1bf761a1e0f3f453aec935b7bacad1ce8dc070d91dbc4438eec57ed
- SSDEEP 393216:u85vz167X1+TtIiFqwuARuAwqh41ZJhCoCbPxWXCIcQS:p5vz0X1QtI1wuAgqh47CBbpWyIK
- TLSH T1DBD633E562A204EBD9E2513A93ABC17CE651B88E8735C4CF1B5015536FAB7C8483FF50
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-04_00bcb19e4bedcad4175b8e34e372a1f4_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_00bcb19e4bedcad4175b8e34e372a1f4_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260630-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_00bcb19e4bedcad4175b8e34e372a1f4_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 12.2MB
- SHA256 ecaec61c10e3018b04a815c1fa7fc215f162ffee75a01bfe9f56a280954d1995
- MD5 00bcb19e4bedcad4175b8e34e372a1f4
- SHA1 cdeb03ea11e8a4fa91edad530475d183a6f4578f
- SHA512 8c2cf4db27066bc30be0bac243accfea46c53fa60d82aba1fb42ceb5c2b939e303a83c6bf1bf761a1e0f3f453aec935b7bacad1ce8dc070d91dbc4438eec57ed
- SSDEEP 393216:u85vz167X1+TtIiFqwuARuAwqh41ZJhCoCbPxWXCIcQS:p5vz0X1QtI1wuAgqh47CBbpWyIK
- TLSH T1DBD633E562A204EBD9E2513A93ABC17CE651B88E8735C4CF1B5015536FAB7C8483FF50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.