General
- Target 2026-07-09_883a9dd03dd9cacc074020406a99909b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 17.4MB
- Sample260709-pvta8aav9j
- SHA256 db8fc28ec41335d89b3e5c5d6490589f42155f3f93d044f15ff2c7f644fd9552
- MD5 883a9dd03dd9cacc074020406a99909b
- SHA1 ddb675f399fd0435148d9c4b833d3c92e9f4cfcf
- SHA512 0f70a353ef879e59c2a78cd813b861c37d5dd6a026f78b67906fd73ccf8165133580841770a11f829f4e3a2ebd67b85b70e8cc2e61fa114cef5cd4f870226282
- SSDEEP 393216:v0BU7SW8kQLIWMnGCnGjQi2bjRo/NesaxXEu5g6oMp9j5esDy0HX4M:OYSW8kQ4nGCnkQi2nREesaxUu5g6Lj5g
- TLSH T14B073394BAC108C9FADB423994D3E47AA6F5BA6103B4C1CB0BA90D410D231E6FD7DB75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-09_883a9dd03dd9cacc074020406a99909b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_883a9dd03dd9cacc074020406a99909b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260706-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_883a9dd03dd9cacc074020406a99909b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 17.4MB
- SHA256 db8fc28ec41335d89b3e5c5d6490589f42155f3f93d044f15ff2c7f644fd9552
- MD5 883a9dd03dd9cacc074020406a99909b
- SHA1 ddb675f399fd0435148d9c4b833d3c92e9f4cfcf
- SHA512 0f70a353ef879e59c2a78cd813b861c37d5dd6a026f78b67906fd73ccf8165133580841770a11f829f4e3a2ebd67b85b70e8cc2e61fa114cef5cd4f870226282
- SSDEEP 393216:v0BU7SW8kQLIWMnGCnGjQi2bjRo/NesaxXEu5g6oMp9j5esDy0HX4M:OYSW8kQ4nGCnkQi2nREesaxUu5g6Lj5g
- TLSH T14B073394BAC108C9FADB423994D3E47AA6F5BA6103B4C1CB0BA90D410D231E6FD7DB75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.