General
- Target 2026-07-27_1b7abff80c8c7112058bf430640f6bb5_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 17.0MB
- Sample260728-arg2fsgp6s
- SHA256 076a05e22aa9da7678b4948785a1102e66b8b22b9ebcefe3bb8c932d0242b8e8
- MD5 1b7abff80c8c7112058bf430640f6bb5
- SHA1 484400d2bd6d03976a7e342d48967f829bb688d2
- SHA512 86a352eb143f601570c9e50c3963b367f50e5e5953e0bacd22add53522775e041d201c2192561e9478851d0fa0e245851fdb1ecd43cd7d5c67d79dbd4c2bac8e
- SSDEEP 393216:pqyCrRu16INdq1B7LERXzCQDmHsn4qSyc0piG7PzPpW:pq5rw16INg1CNzIgzSn0p5zPA
- TLSH T1650733461BC20966FAE7E13A1572A592D2A1F5802B3199FF0B54536A3FBB0F19C377C0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-27_1b7abff80c8c7112058bf430640f6bb5_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_1b7abff80c8c7112058bf430640f6bb5_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_1b7abff80c8c7112058bf430640f6bb5_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 17.0MB
- SHA256 076a05e22aa9da7678b4948785a1102e66b8b22b9ebcefe3bb8c932d0242b8e8
- MD5 1b7abff80c8c7112058bf430640f6bb5
- SHA1 484400d2bd6d03976a7e342d48967f829bb688d2
- SHA512 86a352eb143f601570c9e50c3963b367f50e5e5953e0bacd22add53522775e041d201c2192561e9478851d0fa0e245851fdb1ecd43cd7d5c67d79dbd4c2bac8e
- SSDEEP 393216:pqyCrRu16INdq1B7LERXzCQDmHsn4qSyc0piG7PzPpW:pq5rw16INg1CNzIgzSn0p5zPA
- TLSH T1650733461BC20966FAE7E13A1572A592D2A1F5802B3199FF0B54536A3FBB0F19C377C0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting