General
- Target 2026-07-29_7a8ee8006fea6f747b6e4ac0de409720_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 90.6MB
- Sample260729-2gfjestflg
- SHA256 cff4464c0ee8eeb7ebcc17ac89615684cd6796080de68b4d230ecdc3a4b79dd9
- MD5 7a8ee8006fea6f747b6e4ac0de409720
- SHA1 7bc39c48d1be5d2fa1deb3ab23510102565e107c
- SHA512 166e4929a4db542b902d9704b3d05aec298ce801810932517ba3813359ae6e7d1d7747a9f9af068084bd19ab49b1e2ac95903c70a83bd786bb0b773e0b1023e6
- SSDEEP 1572864:eRuhZ70kPWkDmibG3hLsyPlBwOK/Pgm6bRwATRQgzwiDeQNKxTivfS7o0p6o2Rtu:OgbDDmibahLsy9yZoDba26gzwiDe+KxG
- TLSH T19228332452C52A9AF5F58837606FD25BCF62FD125362C54BC63023327C935EA703AE6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-29_7a8ee8006fea6f747b6e4ac0de409720_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_7a8ee8006fea6f747b6e4ac0de409720_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_7a8ee8006fea6f747b6e4ac0de409720_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 90.6MB
- SHA256 cff4464c0ee8eeb7ebcc17ac89615684cd6796080de68b4d230ecdc3a4b79dd9
- MD5 7a8ee8006fea6f747b6e4ac0de409720
- SHA1 7bc39c48d1be5d2fa1deb3ab23510102565e107c
- SHA512 166e4929a4db542b902d9704b3d05aec298ce801810932517ba3813359ae6e7d1d7747a9f9af068084bd19ab49b1e2ac95903c70a83bd786bb0b773e0b1023e6
- SSDEEP 1572864:eRuhZ70kPWkDmibG3hLsyPlBwOK/Pgm6bRwATRQgzwiDeQNKxTivfS7o0p6o2Rtu:OgbDDmibahLsy9yZoDba26gzwiDe+KxG
- TLSH T19228332452C52A9AF5F58837606FD25BCF62FD125362C54BC63023327C935EA703AE6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.