General
- Target 2026-07-05_fc9a3d2aa53c8915246f2790c79ac077_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 11.5MB
- Sample260705-c5xeeact9m
- SHA256 bad8f3b31f8231e028fbb15ca9183822e4f8c798fe4c14b5225a02a7c921445c
- MD5 fc9a3d2aa53c8915246f2790c79ac077
- SHA1 626cbfc0177c352e4c5e00cdd381fe107318285f
- SHA512 134ba1f8b0758c30c5ce3ea40ca5a7a77e310aaf1f97c655f37e7f82d0d802bee3fd81aa873cac2f14212f8a04d7089bb1dbeaa73b8d4efc6fe0607bab1e4519
- SSDEEP 196608:VAd3w0AEY8OhDXEpXnH2ph1igt1/1QpL0uQg+U+02XhwjC5ykiHJkdtKsvoKgpVS:V81FY8+DXEAphJtrQSg+nFoIykzjKsvh
- TLSH T16BC6339873484DA5F8BF023DA8C0992293F1B4652BA5D2EB1BF14D150E376D4EFB4B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-05_fc9a3d2aa53c8915246f2790c79ac077_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_fc9a3d2aa53c8915246f2790c79ac077_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_fc9a3d2aa53c8915246f2790c79ac077_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 11.5MB
- SHA256 bad8f3b31f8231e028fbb15ca9183822e4f8c798fe4c14b5225a02a7c921445c
- MD5 fc9a3d2aa53c8915246f2790c79ac077
- SHA1 626cbfc0177c352e4c5e00cdd381fe107318285f
- SHA512 134ba1f8b0758c30c5ce3ea40ca5a7a77e310aaf1f97c655f37e7f82d0d802bee3fd81aa873cac2f14212f8a04d7089bb1dbeaa73b8d4efc6fe0607bab1e4519
- SSDEEP 196608:VAd3w0AEY8OhDXEpXnH2ph1igt1/1QpL0uQg+U+02XhwjC5ykiHJkdtKsvoKgpVS:V81FY8+DXEAphJtrQSg+nFoIykzjKsvh
- TLSH T16BC6339873484DA5F8BF023DA8C0992293F1B4652BA5D2EB1BF14D150E376D4EFB4B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.