General
- Target 2026-07-15_ff4d1d335c97c7837491b5e31fee5a28_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 51.1MB
- Sample260715-sdggwaez3q
- SHA256 1b3e8e14914422fe043ce3150231849b7ac7ac2ba6927ff0c896406b1359fb44
- MD5 ff4d1d335c97c7837491b5e31fee5a28
- SHA1 72c38d9788fdb3088c88b6eac19d0519aa48f8c3
- SHA512 bf8023f9468fb510d77ee318357ac5016efb56cad7d437574ffe346d329a82c90cfeab81367ae03afaa1122a9aab627558308fea9d15be213635d5aca7442481
- SSDEEP 786432:t5vzInNnSENKnjMYFDmWKU09fj1KBW8P6hn6LLsKMMo5ovsVuR2Ck41oOd9169su:t9z2nvK9FyWC9rSWQ6noeO2CkeKkY+Y
- TLSH T17DC733243240D99AE0947DF5D986E6F06286AC12F762908707B5FE21387F587EE72F1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-15_ff4d1d335c97c7837491b5e31fee5a28_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_ff4d1d335c97c7837491b5e31fee5a28_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_ff4d1d335c97c7837491b5e31fee5a28_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 51.1MB
- SHA256 1b3e8e14914422fe043ce3150231849b7ac7ac2ba6927ff0c896406b1359fb44
- MD5 ff4d1d335c97c7837491b5e31fee5a28
- SHA1 72c38d9788fdb3088c88b6eac19d0519aa48f8c3
- SHA512 bf8023f9468fb510d77ee318357ac5016efb56cad7d437574ffe346d329a82c90cfeab81367ae03afaa1122a9aab627558308fea9d15be213635d5aca7442481
- SSDEEP 786432:t5vzInNnSENKnjMYFDmWKU09fj1KBW8P6hn6LLsKMMo5ovsVuR2Ck41oOd9169su:t9z2nvK9FyWC9rSWQ6noeO2CkeKkY+Y
- TLSH T17DC733243240D99AE0947DF5D986E6F06286AC12F762908707B5FE21387F587EE72F1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.