General
- Target 2026-07-05_7bacee88ae4b3b9f8bd4977aa033cb95_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 11.4MB
- Sample260705-c8henagx41
- SHA256 1372f1b5fd3cbfca3a0fa5748e27deb8328adfa01064aaec201ab1f1810e6b65
- MD5 7bacee88ae4b3b9f8bd4977aa033cb95
- SHA1 2c928e460ac76796ff5cd9b418d373d13b6f5625
- SHA512 ab1135a89c8aec7802f4801f5b792c08f696a1c3f9dfd3621ef47ae9daae9ec6a00da72e916d069db779375d99038fc6b05452562b23032aad8c0ba708f33943
- SSDEEP 196608:SAd3w0AEYAu8CXEpXnH2ph1igt1/1QpL0uQg+U+02XhwjC5ykiHJkCtKsvoKgpVS:S81FYAu/XEAphJtrQSg+nFoIykzSKsvh
- TLSH T160C6339877884DA4F8BF423DA8C0AA2293F1B4511BA5D3DB1BB14D110E776E4EF74B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-05_7bacee88ae4b3b9f8bd4977aa033cb95_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_7bacee88ae4b3b9f8bd4977aa033cb95_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_7bacee88ae4b3b9f8bd4977aa033cb95_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 11.4MB
- SHA256 1372f1b5fd3cbfca3a0fa5748e27deb8328adfa01064aaec201ab1f1810e6b65
- MD5 7bacee88ae4b3b9f8bd4977aa033cb95
- SHA1 2c928e460ac76796ff5cd9b418d373d13b6f5625
- SHA512 ab1135a89c8aec7802f4801f5b792c08f696a1c3f9dfd3621ef47ae9daae9ec6a00da72e916d069db779375d99038fc6b05452562b23032aad8c0ba708f33943
- SSDEEP 196608:SAd3w0AEYAu8CXEpXnH2ph1igt1/1QpL0uQg+U+02XhwjC5ykiHJkCtKsvoKgpVS:S81FYAu/XEAphJtrQSg+nFoIykzSKsvh
- TLSH T160C6339877884DA4F8BF423DA8C0AA2293F1B4511BA5D3DB1BB14D110E776E4EF74B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Loads dropped DLL
Adds Run key to start application
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1