General
- Target 2026-07-17_65dd84d5a30ed18a9eca1864b765a9d6_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 51.0MB
- Sample260717-bdql4sct71
- SHA256 a69b8c0cbc14cd215e51eda583333eeb48c6fb203d878335c6b51186758c4edf
- MD5 65dd84d5a30ed18a9eca1864b765a9d6
- SHA1 c47a2916f7117efec8edfa171d9df18181e44eda
- SHA512 515a33fa34625724ed3d794bf18661465395647758665d0f7ea62671c14bdf15a909ee5b32f166210bd58fa7af9578be589e93a24ed2ededc434e932f7baafce
- SSDEEP 786432:Z5vzInNnSENKnjMYFDmWKU09fj1KBW8J6hn6LLsKMMo5ovsVuR2Ck41oOd9169UD:Z9z2nvK9FyWC9rSWI6noeO2CkeOhGL
- TLSH T164C733243240D98AE0947DF5D996E6F06286AC12F762908707B5FE21387F587EE72F1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-17_65dd84d5a30ed18a9eca1864b765a9d6_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_65dd84d5a30ed18a9eca1864b765a9d6_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_65dd84d5a30ed18a9eca1864b765a9d6_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 51.0MB
- SHA256 a69b8c0cbc14cd215e51eda583333eeb48c6fb203d878335c6b51186758c4edf
- MD5 65dd84d5a30ed18a9eca1864b765a9d6
- SHA1 c47a2916f7117efec8edfa171d9df18181e44eda
- SHA512 515a33fa34625724ed3d794bf18661465395647758665d0f7ea62671c14bdf15a909ee5b32f166210bd58fa7af9578be589e93a24ed2ededc434e932f7baafce
- SSDEEP 786432:Z5vzInNnSENKnjMYFDmWKU09fj1KBW8J6hn6LLsKMMo5ovsVuR2Ck41oOd9169UD:Z9z2nvK9FyWC9rSWI6noeO2CkeOhGL
- TLSH T164C733243240D98AE0947DF5D996E6F06286AC12F762908707B5FE21387F587EE72F1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.