General
- Target 2026-07-20_b70d5f78cf9f451fe9222beab3183234_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 23.0MB
- Sample260720-jedb6sas3m
- SHA256 99c7eb5ae7af240dd8797c9e4436d440aa2174fe05e407a1dca76d66cbf69057
- MD5 b70d5f78cf9f451fe9222beab3183234
- SHA1 925e877925a7e73a221ef2ea646c7102d900e175
- SHA512 294f136e6dc0d300794da1961f9f1552b9abe6c20300ced75d623876cdd0b5886291d0fcda8a02cc24839c022eea69d19b753c4fbd62f51298f1121868a0e9b7
- SSDEEP 393216:lrWE3i2NXhIsv5/OLOjfINyuycIWoIzzVec6VOd1Fdq1B7/zCQDHsoqsbpib:U2PLv5/jju6cD1z0LVY1Fg1dzDnzbp
- TLSH T16537338D82E10466D497627952A33743D2B279516363CBCF4FE0C7782E530E79E39BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
2026-07-20_b70d5f78cf9f451fe9222beab3183234_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_b70d5f78cf9f451fe9222beab3183234_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 23.0MB
- SHA256 99c7eb5ae7af240dd8797c9e4436d440aa2174fe05e407a1dca76d66cbf69057
- MD5 b70d5f78cf9f451fe9222beab3183234
- SHA1 925e877925a7e73a221ef2ea646c7102d900e175
- SHA512 294f136e6dc0d300794da1961f9f1552b9abe6c20300ced75d623876cdd0b5886291d0fcda8a02cc24839c022eea69d19b753c4fbd62f51298f1121868a0e9b7
- SSDEEP 393216:lrWE3i2NXhIsv5/OLOjfINyuycIWoIzzVec6VOd1Fdq1B7/zCQDHsoqsbpib:U2PLv5/jju6cD1z0LVY1Fg1dzDnzbp
- TLSH T16537338D82E10466D497627952A33743D2B279516363CBCF4FE0C7782E530E79E39BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with Themida
-
Loads dropped DLL
-
Enumerates processes with tasklist