General
- Target 2026-07-26_7b93b4f0f5d87971709c8141f67ead06_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 11.4MB
- Sample260726-2n85basdmc
- SHA256 7eddf97af1e1fcf66026af3400114b178a20c98d97e81726aaa9b6a022fa4795
- MD5 7b93b4f0f5d87971709c8141f67ead06
- SHA1 08d720390e1aba053abc6ee7a99c195cd5271691
- SHA512 df7fb94d32c1251221061aa2d0bc68c4c40d769280fbf37bdad2966caa67743d409d4bd93a62ac11e235153ef338eeab1d15c430267c3b8a1e22b8c93df47bbf
- SSDEEP 196608:iAd3w0AEYQIoXEpXnH2ph1igt1/1QpL0uQg+xeukj9tKsvoKgpVFSZZ:i81FYQIoXEAphJtrQSg+xeXjDKsvFgtS
- TLSH T163C63398779809E8F8BF413DA8C08D1693E2B8601BA5D6EB17F14C580E376D8DF74B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
2026-07-26_7b93b4f0f5d87971709c8141f67ead06_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-26_7b93b4f0f5d87971709c8141f67ead06_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-26_7b93b4f0f5d87971709c8141f67ead06_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 11.4MB
- SHA256 7eddf97af1e1fcf66026af3400114b178a20c98d97e81726aaa9b6a022fa4795
- MD5 7b93b4f0f5d87971709c8141f67ead06
- SHA1 08d720390e1aba053abc6ee7a99c195cd5271691
- SHA512 df7fb94d32c1251221061aa2d0bc68c4c40d769280fbf37bdad2966caa67743d409d4bd93a62ac11e235153ef338eeab1d15c430267c3b8a1e22b8c93df47bbf
- SSDEEP 196608:iAd3w0AEYQIoXEpXnH2ph1igt1/1QpL0uQg+xeukj9tKsvoKgpVFSZZ:i81FYQIoXEAphJtrQSg+xeXjDKsvFgtS
- TLSH T163C63398779809E8F8BF413DA8C08D1693E2B8601BA5D6EB17F14C580E376D8DF74B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (131) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Loads dropped DLL