General
- Target 2026-07-05_b029bd2b969eb1503208d13444b759e4_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 10.4MB
- Sample260705-bmvx7abw9j
- SHA256 22d0ed77329595368ec50ffa1a10b4141a41d67044d36349c6437f6185ff3c3c
- MD5 b029bd2b969eb1503208d13444b759e4
- SHA1 f44e319b840905ada5ef027322e8d95b9a22ea89
- SHA512 54e920c5f521b184bc017696f865399c13549f28794d48e6b8122dcb09867490081be75f67c64b2e7042ca5113312faf7942212a1bcfa54b68fb61d6bdef1c09
- SSDEEP 196608:1U6Wlaza0W8UAJNNTwhLlkj9fZwQRCMVIKpdzjPAzQrkh2Ak0ax8NP2/Tsh+4OnE:OcW8paLlww8/IKppD969axyZ
- TLSH T160B63346B78409D8F45F533E99D1982783B6B0A60764C6D797F81EE60E332C4EEB0729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_b029bd2b969eb1503208d13444b759e4_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_b029bd2b969eb1503208d13444b759e4_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_b029bd2b969eb1503208d13444b759e4_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 10.4MB
- SHA256 22d0ed77329595368ec50ffa1a10b4141a41d67044d36349c6437f6185ff3c3c
- MD5 b029bd2b969eb1503208d13444b759e4
- SHA1 f44e319b840905ada5ef027322e8d95b9a22ea89
- SHA512 54e920c5f521b184bc017696f865399c13549f28794d48e6b8122dcb09867490081be75f67c64b2e7042ca5113312faf7942212a1bcfa54b68fb61d6bdef1c09
- SSDEEP 196608:1U6Wlaza0W8UAJNNTwhLlkj9fZwQRCMVIKpdzjPAzQrkh2Ak0ax8NP2/Tsh+4OnE:OcW8paLlww8/IKppD969axyZ
- TLSH T160B63346B78409D8F45F533E99D1982783B6B0A60764C6D797F81EE60E332C4EEB0729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.