2026-07-08_83ad922ab5cb8524ce3ebb2f4772ad61_blankgrabber_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar_zxxz

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-08_83ad922ab5cb8524ce3ebb2f4772ad61_blankgrabber_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar_zxxz
Size 77.1MB
Sample260708-e21c1abv8r
SHA256 507b83e920cc500779125e8862eb9fb8fef6440256842ba0b49c6d018a0e4e21
MD5 83ad922ab5cb8524ce3ebb2f4772ad61
SHA1 b2adc042ae38d86d758e50344dc7d8659dbbff86
SHA512 829d0bb7bd4be30755e75b2d230901716da03f2986f5ff526eff812e64590d738b76fd3a0bb320a3bf9a32a542badbe6de58d0c8cd635ceb28edc608fe3ce03c
SSDEEP 1572864:ksZBjaKgmX0ICugRVH6qREpYd0Htsc2HPY:NB10ISVfRaI0HKcP
TLSH
T1C708DF0763E216AAD577D138C6AB6503EA72B4071330C7DF729C43612F63AE85D7A7A0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-08_83ad922ab5cb8524ce3ebb2f4772ad61_blankgrabber_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar_zxxz

File Explorer

2026-07-08_83ad922ab5cb8524ce3ebb2f4772ad61_blankgrabber_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar_zxxz

.exe 77.1MB

2026-07-08_83ad922ab5cb8524ce3ebb2f4772ad61_blankgrabber_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar_zxxz

IMPHASH d93981c937e9414a759323e9d6924115
SHA256 507b83e920cc500779125e8862eb9fb8fef6440256842ba0b49c6d018a0e4e21
MD5 83ad922ab5cb8524ce3ebb2f4772ad61
SHA1 b2adc042ae38d86d758e50344dc7d8659dbbff86
SHA512 829d0bb7bd4be30755e75b2d230901716da03f2986f5ff526eff812e64590d738b76fd3a0bb320a3bf9a32a542badbe6de58d0c8cd635ceb28edc608fe3ce03c
SSDEEP 1572864:ksZBjaKgmX0ICugRVH6qREpYd0Htsc2HPY:NB10ISVfRaI0HKcP
TLSH
T1C708DF0763E216AAD577D138C6AB6503EA72B4071330C7DF729C43612F63AE85D7A7A0
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28287616

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

dbghelp

SymSetSearchPathW SymGetSearchPathW SymGetModuleBase64 SymFunctionTableAccess64 StackWalk64 SymSetOptions SymCleanup SymGetLineFromAddr64 MiniDumpWriteDump SymGetOptions SymFromAddr SymInitialize UnDecorateSymbolName

ws2_32

htonl WSAGetLastError getservbyname getservbyport gethostbyaddr inet_ntoa inet_addr WSACleanup ntohs ntohl closesocket getsockopt socket WSAStartup WSAIoctl recvfrom gethostname gethostbyname accept sendto bind send recv FreeAddrInfoW GetAddrInfoW GetNameInfoW select WSASocketW WSASend WSAGetOverlappedResult WSADuplicateSocketW shutdown listen htons WSASendTo WSARecvFrom WSARecv setsockopt getsockname getpeername ioctlsocket connect WSASetLastError

crypt32

CertEnumCertificatesInStore CertOpenStore CertGetEnhancedKeyUsage CertFindCertificateInStore CertDuplicateCertificateContext CertGetCertificateContextProperty CertCloseStore CertFreeCertificateContext

advapi32

SystemFunction036 RegOpenKeyExA RegQueryValueExA RegEnumKeyExA RegEnumKeyExW EventWriteTransfer EventSetInformation EventUnregister EventRegister ReportEventW RegisterEventSourceW DeregisterEventSource CryptEnumProvidersW CryptSignHashW CryptDestroyHash CryptCreateHash CryptDecrypt CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam CryptDestroyKey CryptReleaseContext CryptAcquireContextW SetSecurityInfo GetSecurityInfo SetEntriesInAclA FreeSid AllocateAndInitializeSid RegQueryInfoKeyW RegGetValueW RegQueryValueExW RegOpenKeyExW RegCloseKey OpenProcessToken GetUserNameW RegNotifyChangeKeyValue

user32

DispatchMessageA TranslateMessage GetMessageA MapVirtualKeyW CharUpperA GetProcessWindowStation MessageBoxW GetUserObjectInformationW GetSystemMetrics

ole32

CoTaskMemFree

iphlpapi

GetBestRoute2 CancelMibChangeNotify2 NotifyIpInterfaceChange if_nametoindex ConvertInterfaceIndexToLuid GetAdaptersAddresses ConvertInterfaceLuidToNameW if_indextoname

psapi

GetModuleFileNameExW EnumProcessModules

shell32

SHGetKnownFolderPath

userenv

GetUserProfileDirectoryW

bcrypt

BCryptGenRandom

kernel32

GetStringTypeW RtlCaptureContext RtlLookupFunctionEntry UnhandledExceptionFilter IsProcessorFeaturePresent InitializeSListHead InterlockedPushEntrySList RtlUnwindEx RtlPcToFileHeader InitializeCriticalSectionAndSpinCount ExitProcess GetModuleHandleExW SetStdHandle ExitThread FreeLibraryAndExitThread GetConsoleOutputCP GetDriveTypeW GetCommandLineA GetCommandLineW FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetCPInfo CompareStringEx HeapQueryInformation IsValidCodePage GetOEMCP K32GetModuleBaseNameW LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx InitOnceComplete InitOnceBeginInitialize SetFileAttributesW VerSetConditionMask VerifyVersionInfoW GetEnvironmentVariableA WideCharToMultiByte GetEnvironmentVariableW GetLastError GetLocalTime SetConsoleCtrlHandler LoadResource LockResource SizeofResource FindResourceA CloseHandle WaitForSingleObject CreateRemoteThread OpenProcess OpenFileMappingW MapViewOfFile UnmapViewOfFile MultiByteToWideChar GetACP GetFileType AddVectoredExceptionHandler RemoveVectoredExceptionHandler RtlCaptureStackBackTrace GetStdHandle GetCurrentProcess GetCurrentProcessId VirtualQuery WriteConsoleW LocalFree FormatMessageA InitOnceExecuteOnce CreateEventA GetModuleHandleA GetProcAddress LoadLibraryExA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetCurrentDirectoryW GetCurrentDirectoryW GetTempPathW SetLastError QueryPerformanceCounter QueryPerformanceFrequency InitializeCriticalSection EnterCriticalSection LeaveCriticalSection Sleep GetProcessTimes SetThreadPriority GetThreadPriority SetPriorityClass GetPriorityClass GlobalMemoryStatusEx GetSystemInfo GetSystemTimeAsFileTime GetTickCount64 GetSystemTimePreciseAsFileTime GetModuleFileNameW GetProcessAffinityMask GetProcessIoCounters FileTimeToSystemTime GetConsoleTitleW SetConsoleTitleW K32GetProcessMemoryInfo SetHandleInformation CreateIoCompletionPort SetFileCompletionNotificationModes CreateFileA CreateFileW DuplicateHandle PostQueuedCompletionStatus SetEvent ResetEvent QueueUserWorkItem RegisterWaitForSingleObject UnregisterWait GetConsoleMode SetConsoleMode GetNumberOfConsoleInputEvents ReadConsoleInputW ReadConsoleW FillConsoleOutputCharacterW FillConsoleOutputAttribute GetConsoleCursorInfo SetConsoleCursorInfo GetConsoleScreenBufferInfo SetConsoleCursorPosition SetConsoleTextAttribute WriteConsoleInputW CancelIoEx CancelIo SwitchToThread GetStartupInfoW NeedCurrentDirectoryForExePathW CreateDirectoryW GetFileAttributesW SetFileInformationByHandle TerminateProcess GetExitCodeProcess ResumeThread CreateProcessW GetProcessId UnregisterWaitEx CreateJobObjectW AssignProcessToJobObject SetInformationJobObject CompareStringOrdinal RtlUnwind InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared TryAcquireSRWLockExclusive TryAcquireSRWLockShared TryEnterCriticalSection DeleteCriticalSection InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableCS ReleaseSemaphore GetCurrentThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentProcessorNumber GetNativeSystemInfo SetThreadAffinityMask CreateSemaphoreA FlushFileBuffers ReadFile WriteFile ConnectNamedPipe SetNamedPipeHandleState PeekNamedPipe CreateNamedPipeW WaitNamedPipeW GetOverlappedResult CancelSynchronousIo CreateNamedPipeA GetNamedPipeHandleStateA GetNamedPipeClientProcessId GetNamedPipeServerProcessId GetLongPathNameW GetShortPathNameW ReadDirectoryChangesW GetFileInformationByHandleEx FindClose FindFirstFileW FindNextFileW GetDiskFreeSpaceW GetFileInformationByHandle GetFileSizeEx GetFinalPathNameByHandleW GetFullPathNameW RemoveDirectoryW SetFilePointerEx SetFileTime DeviceIoControl FlushViewOfFile CreateFileMappingA ReOpenFile CopyFileW MoveFileExW CreateHardLinkW CreateSymbolicLinkW DebugBreak FreeLibrary LoadLibraryExW SetErrorMode GetQueuedCompletionStatus GetCurrentThreadId ReadConsoleA VirtualAlloc VirtualProtect VirtualFree VirtualLock GetModuleHandleW LoadLibraryA LoadLibraryW GetSystemTime SystemTimeToFileTime GetSystemDirectoryA SwitchToFiber DeleteFiber CreateFiberEx ConvertFiberToThread ConvertThreadToFiberEx RtlVirtualUnwind RtlAddFunctionTable RtlDeleteFunctionTable IsDebuggerPresent OutputDebugStringA SuspendThread GetThreadContext GetLocaleInfoEx GetNumberFormatEx GetCurrencyFormatEx ResolveLocaleName SystemTimeToTzSpecificLocalTime GetTimeZoneInformation GetTimeFormatEx GetDateFormatEx CreateThread ExpandEnvironmentStringsA GetQueuedCompletionStatusEx GetThreadTimes GetTickCount CreateFileMappingW GetProcessHeap GetFileSize LockFileEx UnlockFile HeapDestroy HeapCompact HeapAlloc HeapReAlloc DeleteFileW DeleteFileA WaitForSingleObjectEx OutputDebugStringW GetFileAttributesExW GetFileAttributesA GetDiskFreeSpaceA FormatMessageW GetTempPathA HeapSize HeapValidate CreateMutexW UnlockFileEx SetEndOfFile GetFullPathNameA SetFilePointer LockFile HeapFree HeapCreate AreFileApisANSI RaiseException GetDynamicTimeZoneInformation GetGeoInfoW GetUserGeoID LocaleNameToLCID LCIDToLocaleName GetTempFileNameA SetWaitableTimer CreateWaitableTimerExW MapViewOfFileEx QueryThreadCycleTime SleepConditionVariableSRW SetUnhandledExceptionFilter FindFirstFileExW

winmm

timeGetTime

napi_acquire_threadsafe_function napi_add_async_cleanup_hook napi_add_env_cleanup_hook napi_add_finalizer napi_adjust_external_memory napi_async_destroy napi_async_init napi_call_function napi_call_threadsafe_function napi_cancel_async_work napi_check_object_type_tag napi_close_callback_scope napi_close_escapable_handle_scope napi_close_handle_scope napi_coerce_to_bool napi_coerce_to_number napi_coerce_to_object napi_coerce_to_string napi_create_array napi_create_array_with_length napi_create_arraybuffer napi_create_async_work napi_create_bigint_int64 napi_create_bigint_uint64 napi_create_bigint_words napi_create_buffer napi_create_buffer_copy napi_create_dataview napi_create_date napi_create_double napi_create_error napi_create_external napi_create_external_arraybuffer napi_create_external_buffer napi_create_function napi_create_int32 napi_create_int64 napi_create_object napi_create_promise napi_create_range_error napi_create_reference napi_create_string_latin1 napi_create_string_utf16 napi_create_string_utf8 napi_create_symbol napi_create_threadsafe_function napi_create_type_error napi_create_typedarray napi_create_uint32 napi_define_class napi_define_properties napi_delete_async_work napi_delete_element napi_delete_property napi_delete_reference napi_detach_arraybuffer napi_escape_handle napi_fatal_error napi_fatal_exception napi_get_all_property_names napi_get_and_clear_last_exception napi_get_array_length napi_get_arraybuffer_info napi_get_boolean napi_get_buffer_info napi_get_cb_info napi_get_dataview_info napi_get_date_value napi_get_element napi_get_global napi_get_instance_data napi_get_last_error_info napi_get_named_property napi_get_new_target napi_get_node_version napi_get_null napi_get_property napi_get_property_names napi_get_prototype napi_get_reference_value napi_get_threadsafe_function_context napi_get_typedarray_info napi_get_undefined napi_get_uv_event_loop napi_get_value_bigint_int64 napi_get_value_bigint_uint64 napi_get_value_bigint_words napi_get_value_bool napi_get_value_double napi_get_value_external napi_get_value_int32 napi_get_value_int64 napi_get_value_string_latin1 napi_get_value_string_utf16 napi_get_value_string_utf8 napi_get_value_uint32 napi_get_version napi_has_element napi_has_named_property napi_has_own_property napi_has_property napi_instanceof napi_is_array napi_is_arraybuffer napi_is_buffer napi_is_dataview napi_is_date napi_is_detached_arraybuffer napi_is_error napi_is_exception_pending napi_is_promise napi_is_typedarray napi_make_callback napi_module_register napi_new_instance napi_object_freeze napi_object_seal napi_open_callback_scope napi_open_escapable_handle_scope napi_open_handle_scope napi_queue_async_work napi_ref_threadsafe_function napi_reference_ref napi_reference_unref napi_reject_deferred napi_release_threadsafe_function napi_remove_async_cleanup_hook napi_remove_env_cleanup_hook napi_remove_wrap napi_resolve_deferred napi_run_script napi_set_element napi_set_instance_data napi_set_named_property napi_set_property napi_strict_equals napi_throw napi_throw_error napi_throw_range_error napi_throw_type_error napi_type_tag_object napi_typeof napi_unref_threadsafe_function napi_unwrap napi_wrap node_api_create_buffer_from_arraybuffer node_api_create_external_string_latin1 node_api_create_external_string_utf16 node_api_create_property_key_latin1 node_api_create_property_key_utf16 node_api_create_property_key_utf8 node_api_create_syntax_error node_api_get_module_file_name node_api_post_finalizer node_api_symbol_for node_api_throw_syntax_error node_module_register uv_accept uv_async_init uv_async_send uv_available_parallelism uv_backend_fd uv_backend_timeout uv_barrier_destroy uv_barrier_init uv_barrier_wait uv_buf_init uv_cancel uv_chdir uv_check_init uv_check_start uv_check_stop uv_clock_gettime uv_close uv_cond_broadcast uv_cond_destroy uv_cond_init uv_cond_signal uv_cond_timedwait uv_cond_wait uv_cpu_info uv_cpumask_size uv_cwd uv_default_loop uv_disable_stdio_inheritance uv_dlclose uv_dlerror uv_dlopen uv_dlsym uv_err_name uv_err_name_r uv_exepath uv_fileno uv_free_cpu_info uv_free_interface_addresses uv_freeaddrinfo uv_fs_access uv_fs_chmod uv_fs_chown uv_fs_close uv_fs_closedir uv_fs_copyfile uv_fs_event_getpath uv_fs_event_init uv_fs_event_start uv_fs_event_stop uv_fs_fchmod uv_fs_fchown uv_fs_fdatasync uv_fs_fstat uv_fs_fsync uv_fs_ftruncate uv_fs_futime uv_fs_get_path uv_fs_get_ptr uv_fs_get_result uv_fs_get_statbuf uv_fs_get_system_error uv_fs_get_type uv_fs_lchown uv_fs_link uv_fs_lstat uv_fs_lutime uv_fs_mkdir uv_fs_mkdtemp uv_fs_mkstemp uv_fs_open uv_fs_opendir uv_fs_poll_getpath uv_fs_poll_init uv_fs_poll_start uv_fs_poll_stop uv_fs_read uv_fs_readdir uv_fs_readlink uv_fs_realpath uv_fs_rename uv_fs_req_cleanup uv_fs_rmdir uv_fs_scandir uv_fs_scandir_next uv_fs_sendfile uv_fs_stat uv_fs_statfs uv_fs_symlink uv_fs_unlink uv_fs_utime uv_fs_write uv_get_available_memory uv_get_constrained_memory uv_get_free_memory uv_get_osfhandle uv_get_process_title uv_get_total_memory uv_getaddrinfo uv_getnameinfo uv_getrusage uv_gettimeofday uv_guess_handle uv_handle_get_data uv_handle_get_loop uv_handle_get_type uv_handle_set_data uv_handle_size uv_handle_type_name uv_has_ref uv_hrtime uv_idle_init uv_idle_start uv_idle_stop uv_if_indextoiid uv_if_indextoname uv_inet_ntop uv_inet_pton uv_interface_addresses uv_ip4_addr uv_ip4_name uv_ip6_addr uv_ip6_name uv_ip_name uv_is_active uv_is_closing uv_is_readable uv_is_writable uv_key_create uv_key_delete uv_key_get uv_key_set uv_kill uv_library_shutdown uv_listen uv_loadavg uv_loop_alive uv_loop_close uv_loop_configure uv_loop_delete uv_loop_fork uv_loop_get_data uv_loop_init uv_loop_new uv_loop_set_data uv_loop_size uv_metrics_idle_time uv_metrics_info uv_mutex_destroy uv_mutex_init uv_mutex_init_recursive uv_mutex_lock uv_mutex_trylock uv_mutex_unlock uv_now uv_once uv_open_osfhandle uv_os_environ uv_os_free_environ uv_os_free_group uv_os_free_passwd uv_os_get_group uv_os_get_passwd uv_os_get_passwd2 uv_os_getenv uv_os_gethostname uv_os_getpid uv_os_getppid uv_os_getpriority uv_os_homedir uv_os_setenv uv_os_setpriority uv_os_tmpdir uv_os_uname uv_os_unsetenv uv_pipe uv_pipe_bind uv_pipe_bind2 uv_pipe_chmod uv_pipe_connect uv_pipe_connect2 uv_pipe_getpeername uv_pipe_getsockname uv_pipe_init uv_pipe_open uv_pipe_pending_count uv_pipe_pending_instances uv_pipe_pending_type uv_poll_init uv_poll_init_socket uv_poll_start uv_poll_stop uv_prepare_init uv_prepare_start uv_prepare_stop uv_print_active_handles uv_print_all_handles uv_process_get_pid uv_process_kill uv_queue_work uv_random uv_read_start uv_read_stop uv_recv_buffer_size uv_ref uv_replace_allocator uv_req_get_data uv_req_get_type uv_req_set_data uv_req_size uv_req_type_name uv_resident_set_memory uv_run uv_rwlock_destroy uv_rwlock_init uv_rwlock_rdlock uv_rwlock_rdunlock uv_rwlock_tryrdlock uv_rwlock_trywrlock uv_rwlock_wrlock uv_rwlock_wrunlock uv_sem_destroy uv_sem_init uv_sem_post uv_sem_trywait uv_sem_wait uv_send_buffer_size uv_set_process_title uv_setup_args uv_shutdown uv_signal_init uv_signal_start uv_signal_start_oneshot uv_signal_stop uv_sleep uv_socketpair uv_spawn uv_stop uv_stream_get_write_queue_size uv_stream_set_blocking uv_strerror uv_strerror_r uv_tcp_bind uv_tcp_close_reset uv_tcp_connect uv_tcp_getpeername uv_tcp_getsockname uv_tcp_init uv_tcp_init_ex uv_tcp_keepalive uv_tcp_nodelay uv_tcp_open uv_tcp_simultaneous_accepts uv_thread_create uv_thread_create_ex uv_thread_equal uv_thread_getaffinity uv_thread_getcpu uv_thread_getpriority uv_thread_join uv_thread_self uv_thread_setaffinity uv_thread_setpriority uv_timer_again uv_timer_get_due_in uv_timer_get_repeat uv_timer_init uv_timer_set_repeat uv_timer_start uv_timer_stop uv_translate_sys_error uv_try_write uv_try_write2 uv_tty_get_vterm_state uv_tty_get_winsize uv_tty_init uv_tty_reset_mode uv_tty_set_mode uv_tty_set_vterm_state uv_udp_bind uv_udp_connect uv_udp_get_send_queue_count uv_udp_get_send_queue_size uv_udp_getpeername uv_udp_getsockname uv_udp_init uv_udp_init_ex uv_udp_open uv_udp_recv_start uv_udp_recv_stop uv_udp_send uv_udp_set_broadcast uv_udp_set_membership uv_udp_set_multicast_interface uv_udp_set_multicast_loop uv_udp_set_multicast_ttl uv_udp_set_source_membership uv_udp_set_ttl uv_udp_try_send uv_udp_using_recvmmsg uv_unref uv_update_time uv_uptime uv_utf16_length_as_wtf8 uv_utf16_to_wtf8 uv_version uv_version_string uv_walk uv_write uv_write2 uv_wtf8_length_as_utf16 uv_wtf8_to_utf16

Name

.text

Size

27.3MB

Virtual Size

27.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24.5MB

Virtual Size

24.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

275KB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

139KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

150KB

Virtual Size

150KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-08_83ad922ab5cb8524ce3ebb2f4772ad61_blankgrabber_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar_zxxz

dbghelp

ws2_32

crypt32

advapi32

user32

ole32

iphlpapi

psapi

shell32

userenv

bcrypt

kernel32

winmm

generic