General
- Target 2026-07-23_d59ae973eb24a63af4c01fb436ae8fc6_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 122.2MB
- Sample260723-gfa74agg77
- SHA256 d5cd91e63c0bbcb2aa8e89acc93be8b0ebf2ba1be6bc84f04cb7044b8f9fcb80
- MD5 d59ae973eb24a63af4c01fb436ae8fc6
- SHA1 c3b603bf07b11d4c953920a5cbc6470c2578d0a1
- SHA512 5dd8ea35b185372c431cf6c98b21c52d92508ae40e2d1febc76141138a8984d433b3482b9f2fba60909d30f06eb7aca12cda750d0c410aae43b1ab70a652c40f
- SSDEEP 3145728:8glVQFU0uuaKvP5i1iczqDJMLZ7Cv+fIAxOgp7zzGyP8:8IQruuakP5IzzqyxCv+fO2Ha
- TLSH T16E583306F5704AF5D37ADA3AD2105B60C54235B173D32DC7B286B104CA6DBE39A9BE0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_d59ae973eb24a63af4c01fb436ae8fc6_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_d59ae973eb24a63af4c01fb436ae8fc6_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 122.2MB
- SHA256 d5cd91e63c0bbcb2aa8e89acc93be8b0ebf2ba1be6bc84f04cb7044b8f9fcb80
- MD5 d59ae973eb24a63af4c01fb436ae8fc6
- SHA1 c3b603bf07b11d4c953920a5cbc6470c2578d0a1
- SHA512 5dd8ea35b185372c431cf6c98b21c52d92508ae40e2d1febc76141138a8984d433b3482b9f2fba60909d30f06eb7aca12cda750d0c410aae43b1ab70a652c40f
- SSDEEP 3145728:8glVQFU0uuaKvP5i1iczqDJMLZ7Cv+fIAxOgp7zzGyP8:8IQruuakP5IzzqyxCv+fO2Ha
- TLSH T16E583306F5704AF5D37ADA3AD2105B60C54235B173D32DC7B286B104CA6DBE39A9BE0B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL