General
- Target 2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 17.6MB
- Sample260714-2dbfasey6l
- SHA256 f476e81be13a89b3395550b13b967193aa8588f8d4bf35e335551c56313dcc28
- MD5 3faa3fe744ed1a679d9f05e8591fa46e
- SHA1 627dca9c0515fc85180a1703ddc2adab35780ac6
- SHA512 2aa08b0351ff1b7ca85dbab6cfe3c3050ae34177bf33d00ea3e3132cbdd2a9be72674eecb231eb25075c8c845aa6152358422f83c938579c05b203aade5d5ee2
- SSDEEP 393216:pqmn7LMsgIfUKOcFXEAphVtpIwQSg+j/iZ/d+82qoDYSNcUWam+QfW7:pqq4s58KPFRphFBo+jiZV+mWYSJ/
- TLSH T1AD073315AF840D9EF7CA0537D0FC9992A2BB2B84D7E3F1DE17A209072D5FE850A74498
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 17.6MB
- SHA256 f476e81be13a89b3395550b13b967193aa8588f8d4bf35e335551c56313dcc28
- MD5 3faa3fe744ed1a679d9f05e8591fa46e
- SHA1 627dca9c0515fc85180a1703ddc2adab35780ac6
- SHA512 2aa08b0351ff1b7ca85dbab6cfe3c3050ae34177bf33d00ea3e3132cbdd2a9be72674eecb231eb25075c8c845aa6152358422f83c938579c05b203aade5d5ee2
- SSDEEP 393216:pqmn7LMsgIfUKOcFXEAphVtpIwQSg+j/iZ/d+82qoDYSNcUWam+QfW7:pqq4s58KPFRphFBo+jiZV+mWYSJ/
- TLSH T1AD073315AF840D9EF7CA0537D0FC9992A2BB2B84D7E3F1DE17A209072D5FE850A74498
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting