General
- Target 2026-07-24_084eaa3189dba98009049a1590edae5c_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 9.8MB
- Sample260724-yjehcsstft
- SHA256 ac42b76470455ec55fc04daeb4ecf1b86a5ad83ae593565a33054fd434526214
- MD5 084eaa3189dba98009049a1590edae5c
- SHA1 7751f5f623828e63ccf8eadbdaf886ac76b11c73
- SHA512 c0c46b172ebaadb31ca0754858db6fa261e05474809095eb724ad058747dbb7f25e5d489babf7c28f303bd3fd2e8e8d4e079cded80d222467f6464589389f39e
- SSDEEP 196608:aVXQR2er8eZgurHm/uhHToAUPNfGU5vXvE4L3dIgZ+9Y1r:aaobuCmhHTodRGkXs4DJAyF
- TLSH T161A62325A2D805F9F537D13C89928665EB737C191720DAC703E44AA63F27AF15B3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-24_084eaa3189dba98009049a1590edae5c_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_084eaa3189dba98009049a1590edae5c_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_084eaa3189dba98009049a1590edae5c_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 9.8MB
- SHA256 ac42b76470455ec55fc04daeb4ecf1b86a5ad83ae593565a33054fd434526214
- MD5 084eaa3189dba98009049a1590edae5c
- SHA1 7751f5f623828e63ccf8eadbdaf886ac76b11c73
- SHA512 c0c46b172ebaadb31ca0754858db6fa261e05474809095eb724ad058747dbb7f25e5d489babf7c28f303bd3fd2e8e8d4e079cded80d222467f6464589389f39e
- SSDEEP 196608:aVXQR2er8eZgurHm/uhHToAUPNfGU5vXvE4L3dIgZ+9Y1r:aaobuCmhHTodRGkXs4DJAyF
- TLSH T161A62325A2D805F9F537D13C89928665EB737C191720DAC703E44AA63F27AF15B3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application