General
- Target 2026-07-10_328f21c09a679e09c23dd0a088cb9db0_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 65.3MB
- Sample260710-wtcemsgy9v
- SHA256 f82f36ffff6fb0f4afaf79a9d1d152ee5140cee0e8f3e3cf1196d21f7eab6839
- MD5 328f21c09a679e09c23dd0a088cb9db0
- SHA1 8e7178ea911b26b4cbc8ba9b410046cc8994b4c5
- SHA512 7ccad7dab382f9fc6276eb4d098bcbee7700468c93b695e57110c3f9e10efc851e077709e4f4ae78d76bb8b60b4a4edd4e78bcafb33606fcaa2199a1fe4d3552
- SSDEEP 1572864:GwSEqXGMK4XR3bLSCU/+6yPljPSTSMt2qHWB75ilNMG/36:GrEqgYRPSC++6y9Di2qHO5iso
- TLSH T1E6E73365BF8D5855E2A90879C1F0D1DEC108B0AE07B085B78AB0078B4A7F6D47A7F5BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-10_328f21c09a679e09c23dd0a088cb9db0_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_328f21c09a679e09c23dd0a088cb9db0_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_328f21c09a679e09c23dd0a088cb9db0_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 65.3MB
- SHA256 f82f36ffff6fb0f4afaf79a9d1d152ee5140cee0e8f3e3cf1196d21f7eab6839
- MD5 328f21c09a679e09c23dd0a088cb9db0
- SHA1 8e7178ea911b26b4cbc8ba9b410046cc8994b4c5
- SHA512 7ccad7dab382f9fc6276eb4d098bcbee7700468c93b695e57110c3f9e10efc851e077709e4f4ae78d76bb8b60b4a4edd4e78bcafb33606fcaa2199a1fe4d3552
- SSDEEP 1572864:GwSEqXGMK4XR3bLSCU/+6yPljPSTSMt2qHWB75ilNMG/36:GrEqgYRPSC++6y9Di2qHO5iso
- TLSH T1E6E73365BF8D5855E2A90879C1F0D1DEC108B0AE07B085B78AB0078B4A7F6D47A7F5BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.