General

  • Target
    2026-07-26_8cc43a18fa0f2f1c9db0062b39def64a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_stealc
  • Size 18.1MB
  • Sample260726-3dzcsssfpb
  • SHA256 bcf723e252b69a8fc987da8af7b3e842901e495cb4d68c1266c1a4192d4c48cb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs

File Explorer

  • 2026-07-26_8cc43a18fa0f2f1c9db0062b39def64a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_stealc
    .exe 18.1MB

2026-07-26_8cc43a18fa0f2f1c9db0062b39def64a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_stealc

  • IMPHASH da31a57de833ef3be543010d60bee7a1
  • SHA256 bcf723e252b69a8fc987da8af7b3e842901e495cb4d68c1266c1a4192d4c48cb
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects Windows executables referencing non-Windows User-Agents

Digest
39:38:92:45:66:bf:62:ed:e0:e4:48:cc:f2:d2:6f:a2:25:0a:18:8a:97:62:c4:19:2c:27:0b:94:d2:b4:bb:ca
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Neumetrix Limited,O=Neumetrix Limited,L=Newton Abbot,ST=Devon,C=GB
Minor OS version
0
Major OS version
6
Entry point
4788688
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Git\HttpWatch\v16.1\Win\Studio\Unicode_Release_x64\HttpWatchStudiox64.pdb