General
- Target 2026-07-06_4de5e6a92a10a0789be61c84656725a8_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 15.1MB
- Sample260706-wxfapsbt7z
- SHA256 3f81a68e92ccf887862ec1f7d1abb03adced0254197a9839a74f51afaf8765a5
- MD5 4de5e6a92a10a0789be61c84656725a8
- SHA1 7ae6c8405d0b2b424202ded6ad22890b6bc3f13c
- SHA512 222e4283f8910eed2683b9827001bde26f5f24b55932911dee59ab6d8256e28b082b6fb3a53dcca712a7ede185232e22caf84a49160fb16b7ed776f90a9021ef
- SSDEEP 393216:vpW8NLb1+TtIiFq8uARuAbdS9QVcax6j41iokb9SsIS:xW8NH1QtI18uArsMcax6j4Q3b9Zd
- TLSH T18DF633C9B3A60499E8DD123F52D98266ABE374A34769C2CB2BE41C911D773E4DE35F00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-06_4de5e6a92a10a0789be61c84656725a8_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_4de5e6a92a10a0789be61c84656725a8_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260706-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_4de5e6a92a10a0789be61c84656725a8_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 15.1MB
- SHA256 3f81a68e92ccf887862ec1f7d1abb03adced0254197a9839a74f51afaf8765a5
- MD5 4de5e6a92a10a0789be61c84656725a8
- SHA1 7ae6c8405d0b2b424202ded6ad22890b6bc3f13c
- SHA512 222e4283f8910eed2683b9827001bde26f5f24b55932911dee59ab6d8256e28b082b6fb3a53dcca712a7ede185232e22caf84a49160fb16b7ed776f90a9021ef
- SSDEEP 393216:vpW8NLb1+TtIiFq8uARuAbdS9QVcax6j41iokb9SsIS:xW8NH1QtI18uArsMcax6j4Q3b9Zd
- TLSH T18DF633C9B3A60499E8DD123F52D98266ABE374A34769C2CB2BE41C911D773E4DE35F00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Loads dropped DLL