General
- Target 2026-07-30_a624ee6e062d6d146138aff5bbadbac4_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 76.1MB
- Sample260730-17dl3s1wev
- SHA256 25e73c031796d4f3e27e280272f688e8c1279dbcb3b35edf966af738f1a240cd
- MD5 a624ee6e062d6d146138aff5bbadbac4
- SHA1 9d3ff746de2062e49be95f5dc7647a4b2240f73f
- SHA512 2425b242bb8dd5f2be5ce3286d06944178b449249debe26bd1c21aaf7c72bdf5396c270b5324672b0107317481f13d7b3ea9d1ba73d3cccd945828d7385584fa
- SSDEEP 1572864:lpIgWeO+dy2J0f0/rBdsGzbpip0WWHnGCnke+BDOymWENEX+YebkDv:lD7OI5BBztE0WSGCnkedNEwbC
- TLSH T1660833585D150AEBF24B0732C4E2A9667BFA36864BA6C09A1BE54C035B371C5EC7CD33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-30_a624ee6e062d6d146138aff5bbadbac4_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_a624ee6e062d6d146138aff5bbadbac4_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_a624ee6e062d6d146138aff5bbadbac4_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 76.1MB
- SHA256 25e73c031796d4f3e27e280272f688e8c1279dbcb3b35edf966af738f1a240cd
- MD5 a624ee6e062d6d146138aff5bbadbac4
- SHA1 9d3ff746de2062e49be95f5dc7647a4b2240f73f
- SHA512 2425b242bb8dd5f2be5ce3286d06944178b449249debe26bd1c21aaf7c72bdf5396c270b5324672b0107317481f13d7b3ea9d1ba73d3cccd945828d7385584fa
- SSDEEP 1572864:lpIgWeO+dy2J0f0/rBdsGzbpip0WWHnGCnke+BDOymWENEX+YebkDv:lD7OI5BBztE0WSGCnkedNEwbC
- TLSH T1660833585D150AEBF24B0732C4E2A9667BFA36864BA6C09A1BE54C035B371C5EC7CD33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.