General
- Target 2026-07-23_767d18f9efcba07a2ec57f035ea7d26b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 24.0MB
- Sample260723-wn87eshj8v
- SHA256 abf323bda6cbefcfc5340167c75f282cfc0843fc0afc96b0c803ed32302cabc4
- MD5 767d18f9efcba07a2ec57f035ea7d26b
- SHA1 57328765132a7af6a8ce67afcc68b7903aab3700
- SHA512 447463fcab4db347d23b8ac98671c59071997da1fd68795599be67af317f1935adcb9cd70906e8499eba7ed65d84c18ed2f628ee084e5ea08563df24133d4ba6
- SSDEEP 393216:oY7SgIfUKOcR173sB1sikDHiR7WlRoLXTt6AkatD3GkZFIvZEKEDt:+58KPR14B1spw7s2t6CW86mjZ
- TLSH T137473364B264983AFB43963F45A80981B1B671280B1286FF0BF447753F4B2E64D3E79D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-23_767d18f9efcba07a2ec57f035ea7d26b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_767d18f9efcba07a2ec57f035ea7d26b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_767d18f9efcba07a2ec57f035ea7d26b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 24.0MB
- SHA256 abf323bda6cbefcfc5340167c75f282cfc0843fc0afc96b0c803ed32302cabc4
- MD5 767d18f9efcba07a2ec57f035ea7d26b
- SHA1 57328765132a7af6a8ce67afcc68b7903aab3700
- SHA512 447463fcab4db347d23b8ac98671c59071997da1fd68795599be67af317f1935adcb9cd70906e8499eba7ed65d84c18ed2f628ee084e5ea08563df24133d4ba6
- SSDEEP 393216:oY7SgIfUKOcR173sB1sikDHiR7WlRoLXTt6AkatD3GkZFIvZEKEDt:+58KPR14B1spw7s2t6CW86mjZ
- TLSH T137473364B264983AFB43963F45A80981B1B671280B1286FF0BF447753F4B2E64D3E79D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.