General
- Target 2026-07-16_a194f9609c25e639948fa95ac3fa2338_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 25.5MB
- Sample260716-be5gnads61
- SHA256 3865c89f01f86a1a578194eceb00d115ea45f9e86a2914e3aae69db208b42ff7
- MD5 a194f9609c25e639948fa95ac3fa2338
- SHA1 1487dc7831dfbf857cf193213d7142bc89e27c56
- SHA512 69d9120976aa5aaff006ef95a0ebdeaaa374db078c23835570caeb67be18861d1f536e8e842faf7e897680f86a717ef17cdcbac978edfa404514b327b5d7eda3
- SSDEEP 786432:gbS4ce2s7OoBT58KPzfRphMBo+wOsrxFgodnvC1z:z4f/9zdbfPhr10odSz
- TLSH T12E473398B6216DBFFCE7473945B98921D27332800F8581FF17B40A291E6B7854F386B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-16_a194f9609c25e639948fa95ac3fa2338_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_a194f9609c25e639948fa95ac3fa2338_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_a194f9609c25e639948fa95ac3fa2338_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 25.5MB
- SHA256 3865c89f01f86a1a578194eceb00d115ea45f9e86a2914e3aae69db208b42ff7
- MD5 a194f9609c25e639948fa95ac3fa2338
- SHA1 1487dc7831dfbf857cf193213d7142bc89e27c56
- SHA512 69d9120976aa5aaff006ef95a0ebdeaaa374db078c23835570caeb67be18861d1f536e8e842faf7e897680f86a717ef17cdcbac978edfa404514b327b5d7eda3
- SSDEEP 786432:gbS4ce2s7OoBT58KPzfRphMBo+wOsrxFgodnvC1z:z4f/9zdbfPhr10odSz
- TLSH T12E473398B6216DBFFCE7473945B98921D27332800F8581FF17B40A291E6B7854F386B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.