General
- Target 2026-07-14_e94c4d9acba55154e93bd76bd7a0354b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 50.8MB
- Sample260714-dal6maez7x
- SHA256 c59962ea0b8b7f316c0e4f38576d9b0a6d43e29286d2e7b4a2dedb6629e06c76
- MD5 e94c4d9acba55154e93bd76bd7a0354b
- SHA1 ea4062cf7b033e920175d8f9771a5cf613304ea2
- SHA512 de98d231cb0ed8a814e5c4f06c323aadd266027f98f61ccbcbe152df682bd2b66e9b08e83fb6e6be8cfa5f5b2b7b655598e478a735ec30117f672a4515f986c6
- SSDEEP 1572864:gjS6XGMK4XR3bLSCU/+6yPl3GWhChw1btlK/rQPVEeeo6sRC:gtgYRPSC++6y9Wi/U/rQPdeeR
- TLSH T17FC73304FBC804C6F9F92578A0A1E602DAA5F0DB87B146EB51F5054744779E0AFBEE38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-14_e94c4d9acba55154e93bd76bd7a0354b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_e94c4d9acba55154e93bd76bd7a0354b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_e94c4d9acba55154e93bd76bd7a0354b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 50.8MB
- SHA256 c59962ea0b8b7f316c0e4f38576d9b0a6d43e29286d2e7b4a2dedb6629e06c76
- MD5 e94c4d9acba55154e93bd76bd7a0354b
- SHA1 ea4062cf7b033e920175d8f9771a5cf613304ea2
- SHA512 de98d231cb0ed8a814e5c4f06c323aadd266027f98f61ccbcbe152df682bd2b66e9b08e83fb6e6be8cfa5f5b2b7b655598e478a735ec30117f672a4515f986c6
- SSDEEP 1572864:gjS6XGMK4XR3bLSCU/+6yPl3GWhChw1btlK/rQPVEeeo6sRC:gtgYRPSC++6y9Wi/U/rQPdeeR
- TLSH T17FC73304FBC804C6F9F92578A0A1E602DAA5F0DB87B146EB51F5054744779E0AFBEE38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.