General
- Target 2026-07-29_52243ac96863f311b1fdbbd3a5b2bda5_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 90.3MB
- Sample260729-2npexagb56
- SHA256 1f66ce416b3802a8906f7bc742fc0b2b74d19bd3f4c8775f730cbe5a42ce60d6
- MD5 52243ac96863f311b1fdbbd3a5b2bda5
- SHA1 301f67a21085f19a2923a701f9cafb09745c14b0
- SHA512 d37f9f255bf47858a50c39891726ecea067cea63879e48984687cc952ad26eddc395774031996f9083bb571f9e45f3186e6ef8ff8a98ce4dceec773207676f52
- SSDEEP 1572864:0RuhZ70kPWkDmibG3hLsyPlBwOKEPgm6bRwATRQgzwiDeQNKxTivfS7o0pCo2RtN:wgbDDmibahLsy9yWoDba26gzwiDe+Kx2
- TLSH T1A228332452C5269AF5F58837206FD25B8B62FD125362C59BC63063323D935EE303BE6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-29_52243ac96863f311b1fdbbd3a5b2bda5_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_52243ac96863f311b1fdbbd3a5b2bda5_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_52243ac96863f311b1fdbbd3a5b2bda5_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 90.3MB
- SHA256 1f66ce416b3802a8906f7bc742fc0b2b74d19bd3f4c8775f730cbe5a42ce60d6
- MD5 52243ac96863f311b1fdbbd3a5b2bda5
- SHA1 301f67a21085f19a2923a701f9cafb09745c14b0
- SHA512 d37f9f255bf47858a50c39891726ecea067cea63879e48984687cc952ad26eddc395774031996f9083bb571f9e45f3186e6ef8ff8a98ce4dceec773207676f52
- SSDEEP 1572864:0RuhZ70kPWkDmibG3hLsyPlBwOKEPgm6bRwATRQgzwiDeQNKxTivfS7o0pCo2RtN:wgbDDmibahLsy9yWoDba26gzwiDe+Kx2
- TLSH T1A228332452C5269AF5F58837206FD25B8B62FD125362C59BC63063323D935EE303BE6B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.