General
- Target 2026-07-19_141364dd304704a05a203be769c59601_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 18.8MB
- Sample260719-pnqlrabs4p
- SHA256 5982c921ab16043ffea6c5f3ee9c9933f380a4020173d8ab4320c16e3434d8fb
- MD5 141364dd304704a05a203be769c59601
- SHA1 e96dc5b709275b01f3effd182421337480bcd024
- SHA512 5636337581ee82aa5be611b4f00912da60a060c7ef650847ccaf54ab0f941fe775dd1bb3ac763237c4dbdffbe347dbaa9eeb11bdc48009010c0acdd250400f5d
- SSDEEP 393216:6n7L6MYsgIfUKOcWXEAphVtlIwQSg+wl37Xhv9godjPRvk7do3plj:O+MYs58KPWRphxBo+wlrxlgod5vk70
- TLSH T159173368F6814EBAFDF7113D06658911F1B0B2441F8A85EF0BF146152E3BA924F385FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-19_141364dd304704a05a203be769c59601_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_141364dd304704a05a203be769c59601_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_141364dd304704a05a203be769c59601_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 18.8MB
- SHA256 5982c921ab16043ffea6c5f3ee9c9933f380a4020173d8ab4320c16e3434d8fb
- MD5 141364dd304704a05a203be769c59601
- SHA1 e96dc5b709275b01f3effd182421337480bcd024
- SHA512 5636337581ee82aa5be611b4f00912da60a060c7ef650847ccaf54ab0f941fe775dd1bb3ac763237c4dbdffbe347dbaa9eeb11bdc48009010c0acdd250400f5d
- SSDEEP 393216:6n7L6MYsgIfUKOcWXEAphVtlIwQSg+wl37Xhv9godjPRvk7do3plj:O+MYs58KPWRphxBo+wlrxlgod5vk70
- TLSH T159173368F6814EBAFDF7113D06658911F1B0B2441F8A85EF0BF146152E3BA924F385FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.