614d235c49f256333d468b7bf2471d481b730387b0d9366a8ad3378eda7384c5 | Triage™

Login
Reports

Overview

overview

9

Static

static

3

2026-07-06...om.exe

windows10-2004-x64

9

2026-07-06...om.exe

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-06_7e26dc0e8a03da3fcac7956577eccf71_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
Size 8.1MB
Sample260707-c71vlsgt5x
SHA256 614d235c49f256333d468b7bf2471d481b730387b0d9366a8ad3378eda7384c5
MD5 7e26dc0e8a03da3fcac7956577eccf71
SHA1 c82d428c030c4784447ba778863ac336896caeed
SHA512 bf7d2eb8836414a6fcbf58d5c3a9b479dcc977988fa437f00b431c748e2d08d542f9b921c86103de4a8d628376f6bc58d675a321504c8f67a56d536b7d6ec1f0
SSDEEP 196608:ULK8XxrsW4gXyTntTFqq8N3t4HsGXqrhpXFSFE7E:ULK4rGtZq5X4HsGXq97SN
TLSH
T11A863358D3D419A7E8A3A13C9AB3C595D6A1F9221732CCEF1791433D2F736904839BAC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion discovery evasion exploit persistence pyinstaller ransomware

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

2026-07-06_7e26dc0e8a03da3fcac7956577eccf71_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

defense_evasion discovery evasion exploit persistence ransomware

Behavioral task

behavioral2

Sample

2026-07-06_7e26dc0e8a03da3fcac7956577eccf71_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe

Resource

win11ltsc2024-20260706-en

windows11-ltsc_2024-x64

8 signatures

150 seconds

defense_evasion discovery evasion exploit persistence ransomware

Malware Config

Targets

- Target
  2026-07-06_7e26dc0e8a03da3fcac7956577eccf71_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 8.1MB
- SHA256 614d235c49f256333d468b7bf2471d481b730387b0d9366a8ad3378eda7384c5
- MD5 7e26dc0e8a03da3fcac7956577eccf71
- SHA1 c82d428c030c4784447ba778863ac336896caeed
- SHA512 bf7d2eb8836414a6fcbf58d5c3a9b479dcc977988fa437f00b431c748e2d08d542f9b921c86103de4a8d628376f6bc58d675a321504c8f67a56d536b7d6ec1f0
- SSDEEP 196608:ULK8XxrsW4gXyTntTFqq8N3t4HsGXqrhpXFSFE7E:ULK4rGtZq5X4HsGXq97SN
- TLSH
  T11A863358D3D419A7E8A3A13C9AB3C595D6A1F9221732CCEF1791433D2F736904839BAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion discovery evasion exploit persistence ransomware
- Modifies boot configuration data using bcdedit
  ransomware evasion
- Possible privilege escalation attempt
  exploit
- Loads dropped DLL
- Modifies file permissions
  discovery
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

File and Directory Permissions Modification

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

behavioral1

defense_evasiondiscoveryevasionexploitpersistenceransomware

behavioral2

defense_evasiondiscoveryevasionexploitpersistenceransomware

© 2018-2026

Terms | Privacy