General
- Target 2026-07-14_b010c96982e7c73db8fadb18ef328e52_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 71.0MB
- Sample260714-drmhqads2p
- SHA256 339815462e970bcbcea8e6bb6edd1cd9fd021afe2e6cd42a20d27b8bdbdeee41
- MD5 b010c96982e7c73db8fadb18ef328e52
- SHA1 c91e8cb8a9345cf1006da7c794ba5f89ccfe0ca7
- SHA512 005b0134bf3c52716f8cbb93ba98572e1c13b6f9d3cf6ab2a5b4e90421012d9b1cb4b600e6b1230f5f559054f5d9036fb4f8d5f71e8efe4c538d655a315276e5
- SSDEEP 1572864:r4f/WCYEUZl7XNyjhQR5QMJJ8R/x0/utd0xyGPh5OThxHABecewe:UfeEQlLgaR55oR/x0/kd0xLKFxHAZ
- TLSH T1C9F733C0AD8636FBD9B259306415AD26D6EA31885F53D1AF0BD472362F3BB001EB19F1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-14_b010c96982e7c73db8fadb18ef328e52_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_b010c96982e7c73db8fadb18ef328e52_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_b010c96982e7c73db8fadb18ef328e52_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 71.0MB
- SHA256 339815462e970bcbcea8e6bb6edd1cd9fd021afe2e6cd42a20d27b8bdbdeee41
- MD5 b010c96982e7c73db8fadb18ef328e52
- SHA1 c91e8cb8a9345cf1006da7c794ba5f89ccfe0ca7
- SHA512 005b0134bf3c52716f8cbb93ba98572e1c13b6f9d3cf6ab2a5b4e90421012d9b1cb4b600e6b1230f5f559054f5d9036fb4f8d5f71e8efe4c538d655a315276e5
- SSDEEP 1572864:r4f/WCYEUZl7XNyjhQR5QMJJ8R/x0/utd0xyGPh5OThxHABecewe:UfeEQlLgaR55oR/x0/kd0xLKFxHAZ
- TLSH T1C9F733C0AD8636FBD9B259306415AD26D6EA31885F53D1AF0BD472362F3BB001EB19F1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory