General
- Target 2026-07-22_6df30f95fd7c31d3014bf1b4a321f3ec_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 18.2MB
- Sample260722-v81kcaab33
- SHA256 009ac0ad76d5b546b58f6ad5d36a835560f9dfd697368394ccccf679cd9312e8
- MD5 6df30f95fd7c31d3014bf1b4a321f3ec
- SHA1 dce85652292c15db53c5af9dd683909a12c9cd96
- SHA512 aada2bb47c9b4bdee7c051733213b9adec82bea4feebd3965a950849154d8dcd215b4749b0f9784c8f3a66f2a399512245f875db6ce0b3abf1e0688f971e61ca
- SSDEEP 393216:DlNIZ37UJ32eivEoxy8ejhP21FYTotXEAphVtnIUQSg+lFoIykzeLO7vFgtS:DbS4ce2s7lECMtRphDto+DoIygeLQvFg
- TLSH T1301733D8371949B9FCBA4739ACC8A92293F274954BA4D26707B04C250E777D8EE70F60
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-22_6df30f95fd7c31d3014bf1b4a321f3ec_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_6df30f95fd7c31d3014bf1b4a321f3ec_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_6df30f95fd7c31d3014bf1b4a321f3ec_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 18.2MB
- SHA256 009ac0ad76d5b546b58f6ad5d36a835560f9dfd697368394ccccf679cd9312e8
- MD5 6df30f95fd7c31d3014bf1b4a321f3ec
- SHA1 dce85652292c15db53c5af9dd683909a12c9cd96
- SHA512 aada2bb47c9b4bdee7c051733213b9adec82bea4feebd3965a950849154d8dcd215b4749b0f9784c8f3a66f2a399512245f875db6ce0b3abf1e0688f971e61ca
- SSDEEP 393216:DlNIZ37UJ32eivEoxy8ejhP21FYTotXEAphVtnIUQSg+lFoIykzeLO7vFgtS:DbS4ce2s7lECMtRphDto+DoIygeLQvFg
- TLSH T1301733D8371949B9FCBA4739ACC8A92293F274954BA4D26707B04C250E777D8EE70F60
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1