General
- Target 2026-07-14_dd5b23819bb8ae66482c8a343cce53b3_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 18.2MB
- Sample260714-lp32pacw9t
- SHA256 9d01ed642374450818792ecf13da235dad89f45deb8c16f48b1224df6ac38214
- MD5 dd5b23819bb8ae66482c8a343cce53b3
- SHA1 fed84d8105803cf2c094c750f64b8aff33c462b2
- SHA512 b0b25a245b7ae60d28ae60ce86586fec26d844f7f0d6b4054c6d5c3f34303149c2658434656bc0e39924605a09c23bb08d25c7c24ca3aa85befb98dd954e0002
- SSDEEP 393216:3Zqm0LMo3Zw8ugIfUKOcJXEAphVtnIwQSg+UPm5iattovFspLplA:Jqz4yTu58KPJRphDBo+5dtKvFsW
- TLSH T19717336CBB810D76F8F3013C59648A21E1B272952FE5A5FF0BB10A2A2D773D04E396D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-14_dd5b23819bb8ae66482c8a343cce53b3_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_dd5b23819bb8ae66482c8a343cce53b3_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 18.2MB
- SHA256 9d01ed642374450818792ecf13da235dad89f45deb8c16f48b1224df6ac38214
- MD5 dd5b23819bb8ae66482c8a343cce53b3
- SHA1 fed84d8105803cf2c094c750f64b8aff33c462b2
- SHA512 b0b25a245b7ae60d28ae60ce86586fec26d844f7f0d6b4054c6d5c3f34303149c2658434656bc0e39924605a09c23bb08d25c7c24ca3aa85befb98dd954e0002
- SSDEEP 393216:3Zqm0LMo3Zw8ugIfUKOcJXEAphVtnIwQSg+UPm5iattovFspLplA:Jqz4yTu58KPJRphDBo+5dtKvFsW
- TLSH T19717336CBB810D76F8F3013C59648A21E1B272952FE5A5FF0BB10A2A2D773D04E396D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting