General
- Target 2026-07-24_f1f16077ab311b1d5d7ab234db7d3159_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 32.1MB
- Sample260724-xcts2aaq2z
- SHA256 7d7d0de3516f446119c4126b2a0721e5ddcf14431b72a9914c1188e0018a6688
- MD5 f1f16077ab311b1d5d7ab234db7d3159
- SHA1 6a540d0352058037da1cdaea995a0d05ef5bcdde
- SHA512 8edf72994c9ee96d0c7b4a2a063f87eebef31870ba56aa2c5037bcf90ebeeb75380c37f1cefe5c20b43abeef75abd272ffe218951e28b86c13b52c70881972d3
- SSDEEP 786432:Kngi54W8Miv8Eb4rW+e5RhhPA5lyue2FFyHb/oztZ0a5th+uaVH+tvvgJ:KngtWCEEb4rW+eHhhPylle0AHY0aNs5y
- TLSH T1E777338C9B8544D8F8CD553A65918B23E1B6B9E303648CEF67AC492306E36C7FD347A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-24_f1f16077ab311b1d5d7ab234db7d3159_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_f1f16077ab311b1d5d7ab234db7d3159_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_f1f16077ab311b1d5d7ab234db7d3159_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 32.1MB
- SHA256 7d7d0de3516f446119c4126b2a0721e5ddcf14431b72a9914c1188e0018a6688
- MD5 f1f16077ab311b1d5d7ab234db7d3159
- SHA1 6a540d0352058037da1cdaea995a0d05ef5bcdde
- SHA512 8edf72994c9ee96d0c7b4a2a063f87eebef31870ba56aa2c5037bcf90ebeeb75380c37f1cefe5c20b43abeef75abd272ffe218951e28b86c13b52c70881972d3
- SSDEEP 786432:Kngi54W8Miv8Eb4rW+e5RhhPA5lyue2FFyHb/oztZ0a5th+uaVH+tvvgJ:KngtWCEEb4rW+eHhhPylle0AHY0aNs5y
- TLSH T1E777338C9B8544D8F8CD553A65918B23E1B6B9E303648CEF67AC492306E36C7FD347A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.