Analysis

  • max time kernel
    150s
  • max time network
    115s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    17/07/2026, 01:00

General

  • Target
    2026-07-17_dea71be2a58715296200b0b49a0cc16f_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
  • Size 50.9MB
  • Sample260717-bcq69act5y
  • SHA256 0873a05d34743e85a48080152129e0d545ed1a02d3410ad6587ec828ae6306bd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 43 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-17_dea71be2a58715296200b0b49a0cc16f_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-17_dea71be2a58715296200b0b49a0cc16f_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1240
    • C:\Users\Admin\AppData\Local\Temp\2026-07-17_dea71be2a58715296200b0b49a0cc16f_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-07-17_dea71be2a58715296200b0b49a0cc16f_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4236
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
          PID:4856

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          VCRUNTIME140.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\VCRUNTIME140.dll
          • Size 95KB
          • SHA256 9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _bz2.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\_bz2.pyd
          • Size 81KB
          • SHA256 31c2f21adf27ca77fa746c0fda9c7d7734587ab123b95f2310725aaf4bf4ff3c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _ctypes.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\_ctypes.pyd
          • Size 120KB
          • SHA256 bf017767ac650420487ca3225b3077445d24260bf1a33e75f7361b0c6d3e96b4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _lzma.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\_lzma.pyd
          • Size 154KB
          • SHA256 c414a5a418c41a7a8316687047ed816cad576741bd09a268928e381a03e1eb39
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-console-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-console-l1-1-0.dll
          • Size 22KB
          • SHA256 89dd6fbea61edb8f1c934b7e5e822b4ce9bea939ff585c83c197e06a1fd8311a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-datetime-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-datetime-l1-1-0.dll
          • Size 22KB
          • SHA256 10cd6bf518350f93ab4643f701efdac851cdd7a26a0d8bcabfbb2bd273e1f529
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-debug-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-debug-l1-1-0.dll
          • Size 22KB
          • SHA256 d3fad206a52d9b1dd954c37a45e63e691ebc7bfe8af27a87553203fb445224ce
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-errorhandling-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-errorhandling-l1-1-0.dll
          • Size 22KB
          • SHA256 2859fe2fe069e5f4300dd0106733750b1c8c67ee5d8788c4556b7d21c6da651d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-fibers-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-fibers-l1-1-0.dll
          • Size 22KB
          • SHA256 fd7c5503aa81dea1de9baee318e6a53663f7a4634f42e116e83c6a0f36d11143
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-file-l1-1-0.dll
          • Size 26KB
          • SHA256 eb50cc53863c5a1c0b2fe805d9ecefef3f2dbd0e749a6cc142f89406f4ffdb10
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l1-2-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-file-l1-2-0.dll
          • Size 22KB
          • SHA256 202b77cd363fce7c09d9a59b5779f701767c8734cc17bbe8b9ece5a0619f2225
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l2-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-file-l2-1-0.dll
          • Size 22KB
          • SHA256 f4811f251c49c9ae75f9fe25890bacede852e4f1bfdc6685f49096253a43f007
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-handle-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-handle-l1-1-0.dll
          • Size 22KB
          • SHA256 8e910589f3f9a27ed6ce1d4f2d579b4ef99cfa80c0bf6f59b48ba6556e1578a0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-heap-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-heap-l1-1-0.dll
          • Size 22KB
          • SHA256 ef6657aac4aa97a57e034fd5baf4490706128ffafce7c285dc8736b1f7ee4d09
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-interlocked-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-interlocked-l1-1-0.dll
          • Size 22KB
          • SHA256 e2d698823ba78b85d221744f38d3f9e8acccd0eedbb62c13e7d0dff4a04bd2b1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-libraryloader-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-libraryloader-l1-1-0.dll
          • Size 22KB
          • SHA256 4863006b0c2aa2a39dff2050b64fbbe448b3e28a239e9e58a9a6d32f5f5a3549
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-localization-l1-2-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-localization-l1-2-0.dll
          • Size 22KB
          • SHA256 040e1572da9a980392184b1315f27ebcdaf07a0d94ddf49cbd0d499f7cdb099a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-memory-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-memory-l1-1-0.dll
          • Size 22KB
          • SHA256 ff611cc2cb492c84748fa148eda80dec0cb23fc3b71828475ecea29597c26cd8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-namedpipe-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-namedpipe-l1-1-0.dll
          • Size 22KB
          • SHA256 d7511eb9191a63eb293af941667aa2318fa6da79f06119b280e0b11e6b6b1d25
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processenvironment-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-processenvironment-l1-1-0.dll
          • Size 22KB
          • SHA256 070d8827798ee2aa4c2dc70d7faef8ef680eca4c46ecc2dad3ce16380cab1f82
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processthreads-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-processthreads-l1-1-0.dll
          • Size 22KB
          • SHA256 4297033ef8061c797127f0382df24f69264dca5c14d4f5b6cd2bcca33e26c1f5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processthreads-l1-1-1.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-processthreads-l1-1-1.dll
          • Size 22KB
          • SHA256 b3c0356f64e583c8aca3b1284c6133540a8a12f94b74568fb78ddc36eac6ab15
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-profile-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-profile-l1-1-0.dll
          • Size 22KB
          • SHA256 f6eb755c146d0a0ebf59d24fb9e1e87dc0220b31b33c6acbc8bebaf31493c785
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-rtlsupport-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-rtlsupport-l1-1-0.dll
          • Size 22KB
          • SHA256 5f16a1131c8f00ebbe3c4b108bd772071a2d9b4ca01b669b8aeb3ffb43dabcda
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-string-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-string-l1-1-0.dll
          • Size 22KB
          • SHA256 71c0c7c163d1a3d35e74f8d7299eb38ef7268af1fa276e9a3966761212c570f0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-synch-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-synch-l1-1-0.dll
          • Size 22KB
          • SHA256 1dda55027f7d215442e11c88a82c95f312673b7e7454569e5c969c1c24047915
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-synch-l1-2-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-synch-l1-2-0.dll
          • Size 22KB
          • SHA256 0ea1cf78c0be94554ff7cd17a9c863c951c1e1eaa54191d7f2b0e043697c8d00
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-sysinfo-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-sysinfo-l1-1-0.dll
          • Size 22KB
          • SHA256 9b82643497092524e0aed6cfbaf7467849cde82292313bbd745c61ed2fd32ea8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-timezone-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-timezone-l1-1-0.dll
          • Size 22KB
          • SHA256 1290d332718c47961052ebc97a3a71db2c746a55c035a32b72e5ff00eb422f96
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-util-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-core-util-l1-1-0.dll
          • Size 22KB
          • SHA256 cdf7915f619a728fb64c257bfaa8257ee2353bf3c0b88214d5624931a1ac247b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-conio-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-crt-conio-l1-1-0.dll
          • Size 22KB
          • SHA256 b529fed3875c6f4eecf2d9c012bc0e27cb2d124c2dd1da155f8337b4cb002030
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-convert-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-crt-convert-l1-1-0.dll
          • Size 26KB
          • SHA256 6438c683e376583f6368c582ce3caab274cf3f7d7320e7f6cda427ba338847ca
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-environment-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-crt-environment-l1-1-0.dll
          • Size 22KB
          • SHA256 612df2aaf3435c2be575581d1b2deddcef33f1b53179acff3e4ac24a0fcd3d50
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-filesystem-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-crt-filesystem-l1-1-0.dll
          • Size 22KB
          • SHA256 ca3e5b21f83d87a958ba7934c5e4d8e7939b2e9013fe2deaeba1f9088b4277bb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-heap-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-crt-heap-l1-1-0.dll
          • Size 22KB
          • SHA256 d2ed53111a652fde26c08504803f76301fce2fba04f33a7f250b5b2569e4f240
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-locale-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-crt-locale-l1-1-0.dll
          • Size 22KB
          • SHA256 d42b2d466a81e8e64d8132fad0f4df61d33875449ead8d4f76732b04f74bbce6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-math-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-crt-math-l1-1-0.dll
          • Size 30KB
          • SHA256 b8fdf7893ff152a08fbc4d3f962905da3161b0b9fe71393ab68c56199277e322
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-multibyte-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-crt-multibyte-l1-1-0.dll
          • Size 30KB
          • SHA256 c0d3ea577ea5fd3d8b3fcaf34acb2fa8ee8777de33e75f182e0dad41c96f2805
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-private-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-crt-private-l1-1-0.dll
          • Size 74KB
          • SHA256 3ca858c49a9efca9bea5a26cf3a83a3f1fec8aa429be11dea6cf6edb17eb3819
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-process-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-crt-process-l1-1-0.dll
          • Size 22KB
          • SHA256 fe005d1a7908e36d4fd6cb2711de251462c9bebf99e4060687df11bd0bbedc8a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-runtime-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-crt-runtime-l1-1-0.dll
          • Size 26KB
          • SHA256 d5b5c4ee347678e60af236c5e6fd6b47ad5786e080d14fdb11af0aa5740e7760
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-stdio-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-crt-stdio-l1-1-0.dll
          • Size 26KB
          • SHA256 2a6f53be6e8b8fabbf8fcc2ac1224f70628f4ab35e0b36612a6728df7685d56a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-string-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-crt-string-l1-1-0.dll
          • Size 26KB
          • SHA256 6c24d050afc07bc5d2ba5eb07840345569b52e97442bcc7c4413fccedc11e6c4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-time-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-crt-time-l1-1-0.dll
          • Size 22KB
          • SHA256 fe94985959fe310cafa1eb3e32f28001ef03afefd32497d0c099eb9393bf6f4b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-utility-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\api-ms-win-crt-utility-l1-1-0.dll
          • Size 22KB
          • SHA256 33af8b4a4f1f9a76d5d59fdf634bb469ca9a830133a293a5eef1236b27e37e63
          • MD5 SHA1 SHA512 SSDEEP TLSH

          base_library.zip

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\base_library.zip
          • Size 859KB
          • SHA256 6c1cdacf76cab02fe2aaac896ab7617fa8c902a0ffb16ad96f58283c568b1812
          • MD5 SHA1 SHA512 SSDEEP TLSH

          __init__.pyi

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\jedi\third_party\typeshed\third_party\3\docutils\parsers\__init__.pyi
          • Size 63B
          • SHA256 ddf071712a6926be84384714a23bdf946dc47a083b96fd90a7474d41020bacfe
          • MD5 SHA1 SHA512 TLSH

          libcrypto-1_1.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\libcrypto-1_1.dll
          • Size 3.3MB
          • SHA256 eb975c94e5f4292edd9a8207e356fe4ea0c66e802c1e9305323d37185f85ad6d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libffi-7.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\libffi-7.dll
          • Size 32KB
          • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libsodium-ac42d648.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\libsodium-ac42d648.dll
          • Size 301KB
          • SHA256 ac42d648d80b67cb4d286b21a784c889ece77842ed0eb06563127b3491819178
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libssl-1_1.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\libssl-1_1.dll
          • Size 686KB
          • SHA256 d98dd943517963fd0e790fde00965822aa4e4a48e8a479afad74abf14a300771
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libzmq-v141-mt-4_3_4-0a6f51ca.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\libzmq-v141-mt-4_3_4-0a6f51ca.dll
          • Size 513KB
          • SHA256 b2d32d44a52ce88a71c53ef9386fe00476f7a4dbca8a4c48699f17b38214599b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msvcp140.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\msvcp140.dll
          • Size 566KB
          • SHA256 cb3c74d6fcc091f4eb7c67ee5eb5f76c1c973dea8b1c6b851fcca62c2a9d8aa8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          python3.DLL

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\python3.DLL
          • Size 64KB
          • SHA256 73b0f3952be222ce676672603ae3848ee6e8e479782bd06745116712a4834c53
          • MD5 SHA1 SHA512 SSDEEP TLSH

          python310.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\python310.dll
          • Size 4.3MB
          • SHA256 2bf761bae584ba67d9a41507b45ebd41ab6ae51755b1782496d0bc60cc1d41d5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ucrtbase.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12402\ucrtbase.dll
          • Size 1.1MB
          • SHA256 4e9e93fd6486571e1b5dce381fa536fb6c5593584d3330368ccd47ee6107bf52
          • MD5 SHA1 SHA512 SSDEEP TLSH