General
- Target 2026-07-05_c9f58d90c55720cbc6fbd6af98d8ef0a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 7.4MB
- Sample260705-3cgflab13l
- SHA256 e36e170e00d0402e7afd7c6092a561b0a4c01025f2182e680a3c5ad46693ec77
- MD5 c9f58d90c55720cbc6fbd6af98d8ef0a
- SHA1 e9542ac8fd2a79cc1fd5a3b8f43e0f1db80fa3bf
- SHA512 6098182369119bce15f7615a0885bbb54ae72e5890866b9e2efaa18437ba2c32c96d2f7d25274f0558ebe7dcc9abbea4569641295609100536cd5d43d13a578f
- SSDEEP 196608:iv8ZV9HbdQmR8dA6l3R8Qnf2ODjMnGydS8qPbOa5FTQnH:KqV97dQJlvF3MnG38qPbPGH
- TLSH T143763395A7891CEAE5636139C0539408DB72BC2553B8C7E717D4866A0F1B3D02E3FFA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-05_c9f58d90c55720cbc6fbd6af98d8ef0a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_c9f58d90c55720cbc6fbd6af98d8ef0a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260629-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_c9f58d90c55720cbc6fbd6af98d8ef0a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 7.4MB
- SHA256 e36e170e00d0402e7afd7c6092a561b0a4c01025f2182e680a3c5ad46693ec77
- MD5 c9f58d90c55720cbc6fbd6af98d8ef0a
- SHA1 e9542ac8fd2a79cc1fd5a3b8f43e0f1db80fa3bf
- SHA512 6098182369119bce15f7615a0885bbb54ae72e5890866b9e2efaa18437ba2c32c96d2f7d25274f0558ebe7dcc9abbea4569641295609100536cd5d43d13a578f
- SSDEEP 196608:iv8ZV9HbdQmR8dA6l3R8Qnf2ODjMnGydS8qPbOa5FTQnH:KqV97dQJlvF3MnG38qPbPGH
- TLSH T143763395A7891CEAE5636139C0539408DB72BC2553B8C7E717D4866A0F1B3D02E3FFA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.