General
- Target 2026-07-29_e72f4574ca34518065b1f9c1922bb480_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 12.8MB
- Sample260729-11ssesfe92
- SHA256 3e931f5836a6e38f3aa3452072e40b4ea0b4a0e6497635e91a05960633c016b5
- MD5 e72f4574ca34518065b1f9c1922bb480
- SHA1 d558cb76e084bde073f0820754e57c624936c367
- SHA512 bd56778b21099b09845101b15b551387c6e5839ea0e3247e4d45736570de382614ae419059eb5b6128d86e0e00472aea34f42018e93defd41860cf88b2f77d43
- SSDEEP 393216:ERBU7SW8cF/nGCnGjbi2bjRo4NeVHx5MNXQsufX:UYSW84/nGCnkbi2nRDeb5MNXQsuf
- TLSH T1E3D63388BAC108E9F59B133AD8D6A53297F5BE310764C18B57E65A101E332F5FE39720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-29_e72f4574ca34518065b1f9c1922bb480_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_e72f4574ca34518065b1f9c1922bb480_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 12.8MB
- SHA256 3e931f5836a6e38f3aa3452072e40b4ea0b4a0e6497635e91a05960633c016b5
- MD5 e72f4574ca34518065b1f9c1922bb480
- SHA1 d558cb76e084bde073f0820754e57c624936c367
- SHA512 bd56778b21099b09845101b15b551387c6e5839ea0e3247e4d45736570de382614ae419059eb5b6128d86e0e00472aea34f42018e93defd41860cf88b2f77d43
- SSDEEP 393216:ERBU7SW8cF/nGCnGjbi2bjRo4NeVHx5MNXQsufX:UYSW84/nGCnkbi2nRDeb5MNXQsuf
- TLSH T1E3D63388BAC108E9F59B133AD8D6A53297F5BE310764C18B57E65A101E332F5FE39720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL