General
- Target 2026-07-05_dde7b979ca3ee27edc4113b7e9849ac2_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 11.4MB
- Sample260705-bf1vvsbv7p
- SHA256 ab85a814058997fc8ac54cd95cfa38cf5e67230d5b0a32f2cb0aee3ab566583a
- MD5 dde7b979ca3ee27edc4113b7e9849ac2
- SHA1 e4220be1130e30a4f0be736d4c8eae455c24e667
- SHA512 d4f290cc80dd319349385528c03c3eedb5d5cd039def1ee01f798476e363aa97befb6318bde4756101a50dd30a5728e0d9aca6a8a3bbe0a171167e09e7a33c54
- SSDEEP 196608:ApAd3w0AEYo+lIs+XEpXnH2ph1igt1/1QpL0uQg+U+02XhwjC5ykiHJk2tKsvoKj:w81FYofs+XEAphJtrQSg+nFoIykzmKsp
- TLSH T1E1C63398778809A4F8BF413DA9C0DA3693F1B8512BA5D3E71BF04D151A336E4EE74B90
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-05_dde7b979ca3ee27edc4113b7e9849ac2_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_dde7b979ca3ee27edc4113b7e9849ac2_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_dde7b979ca3ee27edc4113b7e9849ac2_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 11.4MB
- SHA256 ab85a814058997fc8ac54cd95cfa38cf5e67230d5b0a32f2cb0aee3ab566583a
- MD5 dde7b979ca3ee27edc4113b7e9849ac2
- SHA1 e4220be1130e30a4f0be736d4c8eae455c24e667
- SHA512 d4f290cc80dd319349385528c03c3eedb5d5cd039def1ee01f798476e363aa97befb6318bde4756101a50dd30a5728e0d9aca6a8a3bbe0a171167e09e7a33c54
- SSDEEP 196608:ApAd3w0AEYo+lIs+XEpXnH2ph1igt1/1QpL0uQg+U+02XhwjC5ykiHJk2tKsvoKj:w81FYofs+XEAphJtrQSg+nFoIykzmKsp
- TLSH T1E1C63398778809A4F8BF413DA9C0DA3693F1B8512BA5D3E71BF04D151A336E4EE74B90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.