General
- Target 2026-07-18_72cda12363b6f3f5bf6e3de1efa29f5a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 20.8MB
- Sample260718-s8dpgaey7q
- SHA256 cc4943dcaaa11b677c62c01d3ec22efb7f3ff9932aac2738cd386827a7a459d7
- MD5 72cda12363b6f3f5bf6e3de1efa29f5a
- SHA1 370c4f0a4448c95c38edafc4a034494e9cb9b29e
- SHA512 491706ed3246bf17e1e887933d92ab3438cd133023b393d49f19c41a129127b5dd93ce04f84bdd1537e77f9ed70980fcae70baa9aa07ec8f9c1568189d47b147
- SSDEEP 393216:5LUCA/sYDActfX0TVzGENspEZrEzjylgXEAphJt3QSg+oOBKuHvFgtS:VUbHtf+wEzZozjzRphvo+rBrHvFg
- TLSH T16E27331C21E52EEAF8B7483C1EB66402E763B5601BE1F6EF17B05B061D3F2E44A38559
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-18_72cda12363b6f3f5bf6e3de1efa29f5a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_72cda12363b6f3f5bf6e3de1efa29f5a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_72cda12363b6f3f5bf6e3de1efa29f5a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 20.8MB
- SHA256 cc4943dcaaa11b677c62c01d3ec22efb7f3ff9932aac2738cd386827a7a459d7
- MD5 72cda12363b6f3f5bf6e3de1efa29f5a
- SHA1 370c4f0a4448c95c38edafc4a034494e9cb9b29e
- SHA512 491706ed3246bf17e1e887933d92ab3438cd133023b393d49f19c41a129127b5dd93ce04f84bdd1537e77f9ed70980fcae70baa9aa07ec8f9c1568189d47b147
- SSDEEP 393216:5LUCA/sYDActfX0TVzGENspEZrEzjylgXEAphJt3QSg+oOBKuHvFgtS:VUbHtf+wEzZozjzRphvo+rBrHvFg
- TLSH T16E27331C21E52EEAF8B7483C1EB66402E763B5601BE1F6EF17B05B061D3F2E44A38559
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.