General
- Target 2026-07-23_421cbb5fb29279ce9a9c9431c8aad6ee_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 879KB
- Sample260724-bpy3mayygs
- SHA256 e16c5e545943cdb2bd135a7a1d740506e074fec0673c50d40f946259fc684408
- MD5 421cbb5fb29279ce9a9c9431c8aad6ee
- SHA1 946a799f3fc4f3ce48a1a5b40f82d0c680c19299
- SHA512 33613ce67011a99c0aeed00e03143d7865258e29bc1cdf6bbfce37c6c9f9673eee7658d94e6b415e6898b4730264231c0e996b1545120a69f9bda7e36d186661
- SSDEEP 12288:NTdsKDjxeLC76kCzpiZ9t2HEynabst0kooVZubKBY/7EN4+Mjp72vifj5flmDxcN:NKUV76kCkfaaUHZubKBYYm/p72iX
- TLSH T11D156C16A66400BDE0B7C6B4CE665D43E771B84B0370AADB03D05EA63F277D45A3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-23_421cbb5fb29279ce9a9c9431c8aad6ee_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
blakcsee_stealer
C2
-
37.77.150.162
Targets
-
- Target 2026-07-23_421cbb5fb29279ce9a9c9431c8aad6ee_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 879KB
- SHA256 e16c5e545943cdb2bd135a7a1d740506e074fec0673c50d40f946259fc684408
- MD5 421cbb5fb29279ce9a9c9431c8aad6ee
- SHA1 946a799f3fc4f3ce48a1a5b40f82d0c680c19299
- SHA512 33613ce67011a99c0aeed00e03143d7865258e29bc1cdf6bbfce37c6c9f9673eee7658d94e6b415e6898b4730264231c0e996b1545120a69f9bda7e36d186661
- SSDEEP 12288:NTdsKDjxeLC76kCzpiZ9t2HEynabst0kooVZubKBY/7EN4+Mjp72vifj5flmDxcN:NKUV76kCkfaaUHZubKBYYm/p72iX
- TLSH T11D156C16A66400BDE0B7C6B4CE665D43E771B84B0370AADB03D05EA63F277D45A3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.