Analysis

  • max time kernel
    149s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    17/07/2026, 01:01

General

  • Target
    2026-07-17_65dd84d5a30ed18a9eca1864b765a9d6_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
  • Size 51.0MB
  • Sample260717-bdql4sct71
  • SHA256 a69b8c0cbc14cd215e51eda583333eeb48c6fb203d878335c6b51186758c4edf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 49 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-17_65dd84d5a30ed18a9eca1864b765a9d6_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-17_65dd84d5a30ed18a9eca1864b765a9d6_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1248
    • C:\Users\Admin\AppData\Local\Temp\2026-07-17_65dd84d5a30ed18a9eca1864b765a9d6_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-07-17_65dd84d5a30ed18a9eca1864b765a9d6_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4992
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
          PID:4752
    • C:\Windows\system32\AUDIODG.EXE
      C:\Windows\system32\AUDIODG.EXE 0x158 0x2d0
      1⤵
        PID:2552

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            .env

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\.env
            • Size 185B
            • SHA256 a354605b6e9b70264d796ad183eccaefa38f9509c752e426509238a8f3e22a28
            • MD5 SHA1 SHA512 TLSH

            VCRUNTIME140.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\VCRUNTIME140.dll
            • Size 95KB
            • SHA256 9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            _bz2.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\_bz2.pyd
            • Size 81KB
            • SHA256 31c2f21adf27ca77fa746c0fda9c7d7734587ab123b95f2310725aaf4bf4ff3c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            _ctypes.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\_ctypes.pyd
            • Size 120KB
            • SHA256 bf017767ac650420487ca3225b3077445d24260bf1a33e75f7361b0c6d3e96b4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            _lzma.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\_lzma.pyd
            • Size 154KB
            • SHA256 c414a5a418c41a7a8316687047ed816cad576741bd09a268928e381a03e1eb39
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-console-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-console-l1-1-0.dll
            • Size 22KB
            • SHA256 89dd6fbea61edb8f1c934b7e5e822b4ce9bea939ff585c83c197e06a1fd8311a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-datetime-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-datetime-l1-1-0.dll
            • Size 22KB
            • SHA256 10cd6bf518350f93ab4643f701efdac851cdd7a26a0d8bcabfbb2bd273e1f529
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-debug-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-debug-l1-1-0.dll
            • Size 22KB
            • SHA256 d3fad206a52d9b1dd954c37a45e63e691ebc7bfe8af27a87553203fb445224ce
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-errorhandling-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-errorhandling-l1-1-0.dll
            • Size 22KB
            • SHA256 2859fe2fe069e5f4300dd0106733750b1c8c67ee5d8788c4556b7d21c6da651d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-fibers-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-fibers-l1-1-0.dll
            • Size 22KB
            • SHA256 fd7c5503aa81dea1de9baee318e6a53663f7a4634f42e116e83c6a0f36d11143
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-file-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-file-l1-1-0.dll
            • Size 26KB
            • SHA256 eb50cc53863c5a1c0b2fe805d9ecefef3f2dbd0e749a6cc142f89406f4ffdb10
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-file-l1-2-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-file-l1-2-0.dll
            • Size 22KB
            • SHA256 202b77cd363fce7c09d9a59b5779f701767c8734cc17bbe8b9ece5a0619f2225
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-file-l2-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-file-l2-1-0.dll
            • Size 22KB
            • SHA256 f4811f251c49c9ae75f9fe25890bacede852e4f1bfdc6685f49096253a43f007
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-handle-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-handle-l1-1-0.dll
            • Size 22KB
            • SHA256 8e910589f3f9a27ed6ce1d4f2d579b4ef99cfa80c0bf6f59b48ba6556e1578a0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-heap-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-heap-l1-1-0.dll
            • Size 22KB
            • SHA256 ef6657aac4aa97a57e034fd5baf4490706128ffafce7c285dc8736b1f7ee4d09
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-interlocked-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-interlocked-l1-1-0.dll
            • Size 22KB
            • SHA256 e2d698823ba78b85d221744f38d3f9e8acccd0eedbb62c13e7d0dff4a04bd2b1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-libraryloader-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-libraryloader-l1-1-0.dll
            • Size 22KB
            • SHA256 4863006b0c2aa2a39dff2050b64fbbe448b3e28a239e9e58a9a6d32f5f5a3549
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-localization-l1-2-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-localization-l1-2-0.dll
            • Size 22KB
            • SHA256 040e1572da9a980392184b1315f27ebcdaf07a0d94ddf49cbd0d499f7cdb099a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-memory-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-memory-l1-1-0.dll
            • Size 22KB
            • SHA256 ff611cc2cb492c84748fa148eda80dec0cb23fc3b71828475ecea29597c26cd8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-namedpipe-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-namedpipe-l1-1-0.dll
            • Size 22KB
            • SHA256 d7511eb9191a63eb293af941667aa2318fa6da79f06119b280e0b11e6b6b1d25
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-processenvironment-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-processenvironment-l1-1-0.dll
            • Size 22KB
            • SHA256 070d8827798ee2aa4c2dc70d7faef8ef680eca4c46ecc2dad3ce16380cab1f82
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-processthreads-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-processthreads-l1-1-0.dll
            • Size 22KB
            • SHA256 4297033ef8061c797127f0382df24f69264dca5c14d4f5b6cd2bcca33e26c1f5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-processthreads-l1-1-1.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-processthreads-l1-1-1.dll
            • Size 22KB
            • SHA256 b3c0356f64e583c8aca3b1284c6133540a8a12f94b74568fb78ddc36eac6ab15
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-profile-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-profile-l1-1-0.dll
            • Size 22KB
            • SHA256 f6eb755c146d0a0ebf59d24fb9e1e87dc0220b31b33c6acbc8bebaf31493c785
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-rtlsupport-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-rtlsupport-l1-1-0.dll
            • Size 22KB
            • SHA256 5f16a1131c8f00ebbe3c4b108bd772071a2d9b4ca01b669b8aeb3ffb43dabcda
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-string-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-string-l1-1-0.dll
            • Size 22KB
            • SHA256 71c0c7c163d1a3d35e74f8d7299eb38ef7268af1fa276e9a3966761212c570f0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-synch-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-synch-l1-1-0.dll
            • Size 22KB
            • SHA256 1dda55027f7d215442e11c88a82c95f312673b7e7454569e5c969c1c24047915
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-synch-l1-2-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-synch-l1-2-0.dll
            • Size 22KB
            • SHA256 0ea1cf78c0be94554ff7cd17a9c863c951c1e1eaa54191d7f2b0e043697c8d00
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-sysinfo-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-sysinfo-l1-1-0.dll
            • Size 22KB
            • SHA256 9b82643497092524e0aed6cfbaf7467849cde82292313bbd745c61ed2fd32ea8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-timezone-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-timezone-l1-1-0.dll
            • Size 22KB
            • SHA256 1290d332718c47961052ebc97a3a71db2c746a55c035a32b72e5ff00eb422f96
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-util-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-core-util-l1-1-0.dll
            • Size 22KB
            • SHA256 cdf7915f619a728fb64c257bfaa8257ee2353bf3c0b88214d5624931a1ac247b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-conio-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-crt-conio-l1-1-0.dll
            • Size 22KB
            • SHA256 b529fed3875c6f4eecf2d9c012bc0e27cb2d124c2dd1da155f8337b4cb002030
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-convert-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-crt-convert-l1-1-0.dll
            • Size 26KB
            • SHA256 6438c683e376583f6368c582ce3caab274cf3f7d7320e7f6cda427ba338847ca
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-environment-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-crt-environment-l1-1-0.dll
            • Size 22KB
            • SHA256 612df2aaf3435c2be575581d1b2deddcef33f1b53179acff3e4ac24a0fcd3d50
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-filesystem-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-crt-filesystem-l1-1-0.dll
            • Size 22KB
            • SHA256 ca3e5b21f83d87a958ba7934c5e4d8e7939b2e9013fe2deaeba1f9088b4277bb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-heap-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-crt-heap-l1-1-0.dll
            • Size 22KB
            • SHA256 d2ed53111a652fde26c08504803f76301fce2fba04f33a7f250b5b2569e4f240
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-locale-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-crt-locale-l1-1-0.dll
            • Size 22KB
            • SHA256 d42b2d466a81e8e64d8132fad0f4df61d33875449ead8d4f76732b04f74bbce6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-math-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-crt-math-l1-1-0.dll
            • Size 30KB
            • SHA256 b8fdf7893ff152a08fbc4d3f962905da3161b0b9fe71393ab68c56199277e322
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-multibyte-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-crt-multibyte-l1-1-0.dll
            • Size 30KB
            • SHA256 c0d3ea577ea5fd3d8b3fcaf34acb2fa8ee8777de33e75f182e0dad41c96f2805
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-private-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-crt-private-l1-1-0.dll
            • Size 74KB
            • SHA256 3ca858c49a9efca9bea5a26cf3a83a3f1fec8aa429be11dea6cf6edb17eb3819
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-process-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-crt-process-l1-1-0.dll
            • Size 22KB
            • SHA256 fe005d1a7908e36d4fd6cb2711de251462c9bebf99e4060687df11bd0bbedc8a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-runtime-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-crt-runtime-l1-1-0.dll
            • Size 26KB
            • SHA256 d5b5c4ee347678e60af236c5e6fd6b47ad5786e080d14fdb11af0aa5740e7760
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-stdio-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-crt-stdio-l1-1-0.dll
            • Size 26KB
            • SHA256 2a6f53be6e8b8fabbf8fcc2ac1224f70628f4ab35e0b36612a6728df7685d56a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-string-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-crt-string-l1-1-0.dll
            • Size 26KB
            • SHA256 6c24d050afc07bc5d2ba5eb07840345569b52e97442bcc7c4413fccedc11e6c4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-time-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-crt-time-l1-1-0.dll
            • Size 22KB
            • SHA256 fe94985959fe310cafa1eb3e32f28001ef03afefd32497d0c099eb9393bf6f4b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-utility-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\api-ms-win-crt-utility-l1-1-0.dll
            • Size 22KB
            • SHA256 33af8b4a4f1f9a76d5d59fdf634bb469ca9a830133a293a5eef1236b27e37e63
            • MD5 SHA1 SHA512 SSDEEP TLSH

            base_library.zip

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\base_library.zip
            • Size 859KB
            • SHA256 9de2952e429547129fab1a27511e7c6ec723aafce88930980b382b6a3ab5168e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            icon.ico

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\icon.ico
            • Size 146KB
            • SHA256 cd885ef625ecad92ff8adca7c9273517f8d36b8387bf61f9ac672deb92c423a8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            __init__.pyi

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\jedi\third_party\typeshed\third_party\3\docutils\parsers\__init__.pyi
            • Size 63B
            • SHA256 ddf071712a6926be84384714a23bdf946dc47a083b96fd90a7474d41020bacfe
            • MD5 SHA1 SHA512 TLSH

            libcrypto-1_1.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\libcrypto-1_1.dll
            • Size 3.3MB
            • SHA256 eb975c94e5f4292edd9a8207e356fe4ea0c66e802c1e9305323d37185f85ad6d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libffi-7.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\libffi-7.dll
            • Size 32KB
            • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libsodium-ac42d648.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\libsodium-ac42d648.dll
            • Size 301KB
            • SHA256 ac42d648d80b67cb4d286b21a784c889ece77842ed0eb06563127b3491819178
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libssl-1_1.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\libssl-1_1.dll
            • Size 686KB
            • SHA256 d98dd943517963fd0e790fde00965822aa4e4a48e8a479afad74abf14a300771
            • MD5 SHA1 SHA512 SSDEEP TLSH

            python3.DLL

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\python3.DLL
            • Size 64KB
            • SHA256 73b0f3952be222ce676672603ae3848ee6e8e479782bd06745116712a4834c53
            • MD5 SHA1 SHA512 SSDEEP TLSH

            python310.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\python310.dll
            • Size 4.3MB
            • SHA256 2bf761bae584ba67d9a41507b45ebd41ab6ae51755b1782496d0bc60cc1d41d5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ucrtbase.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI12482\ucrtbase.dll
            • Size 1.1MB
            • SHA256 4e9e93fd6486571e1b5dce381fa536fb6c5593584d3330368ccd47ee6107bf52
            • MD5 SHA1 SHA512 SSDEEP TLSH