General
- Target 2026-07-10_fa91c4ebdf23289d458e27542b3a73a2_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 81.7MB
- Sample260710-h5986afs8r
- SHA256 ee4005e3239aa3a7ac75cc598afa063a887c2673efd7c14ed4a4b2b8e42bbcef
- MD5 fa91c4ebdf23289d458e27542b3a73a2
- SHA1 b739e5b5d3532f1b7a0f5c88609e75e2536940cb
- SHA512 64f48a07abe2a6cbb6445e7a452f4222e828af3cd7521ca4000e2140d05af2d4d595c0366346ba95614b7fee55039e4a1cc46cf018a62d197f567769f8539e9e
- SSDEEP 1572864:09zLvUMOtCsa7KZq+dy2J0f0/rBdsG7bpip0WWPiIZK4cNPZP0o3mw79:09/UXxa7KYI5BB7tE0Wmw4chV0o79
- TLSH T15A1833158412556BE3895336D2E2C43E3BA7494FCF17C0CE2BD0894BAB6B5DACC79D22
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-10_fa91c4ebdf23289d458e27542b3a73a2_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_fa91c4ebdf23289d458e27542b3a73a2_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_fa91c4ebdf23289d458e27542b3a73a2_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 81.7MB
- SHA256 ee4005e3239aa3a7ac75cc598afa063a887c2673efd7c14ed4a4b2b8e42bbcef
- MD5 fa91c4ebdf23289d458e27542b3a73a2
- SHA1 b739e5b5d3532f1b7a0f5c88609e75e2536940cb
- SHA512 64f48a07abe2a6cbb6445e7a452f4222e828af3cd7521ca4000e2140d05af2d4d595c0366346ba95614b7fee55039e4a1cc46cf018a62d197f567769f8539e9e
- SSDEEP 1572864:09zLvUMOtCsa7KZq+dy2J0f0/rBdsG7bpip0WWPiIZK4cNPZP0o3mw79:09/UXxa7KYI5BB7tE0Wmw4chV0o79
- TLSH T15A1833158412556BE3895336D2E2C43E3BA7494FCF17C0CE2BD0894BAB6B5DACC79D22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Modify Registry
1