General
- Target 2026-07-30_3e2e4ec8d7dac5ba67d46a1db9468ebe_blankgrabber_cobalt-strike_dosia_glassworm_icedid_njrat_quasar-rat_satacom
- Size 18.6MB
- Sample260730-d6zrlayeqh
- SHA256 4fb30e22c2334c0247bc38941400c4df2b9d3e88c2594fa3551e56c1c4fc7f3f
- MD5 3e2e4ec8d7dac5ba67d46a1db9468ebe
- SHA1 8711db18914467f9d36bd7b5af2fa9dd05c7d704
- SHA512 477bb3c8dc6f67234e8efe639d40768c2e0d09970f1425b31a84cabdf40720af45b5e1b86354a98d0fd7899976259172fd07d58a2f61be454b1e395ba486ac38
- SSDEEP 393216:k85vzi/m3pHQ3Hxv0BAZFIxxdBs+s+aq+ZkFQJ4KNAx0cG4a6cnRUsSx:H5vziKwXhtsxJiCk4K69pcRUsk
- TLSH T14317330961B08ADED6F9D23BCA47D528E2D274619B74C1CFC288BB521D274E19A37F1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
2026-07-30_3e2e4ec8d7dac5ba67d46a1db9468ebe_blankgrabber_cobalt-strike_dosia_glassworm_icedid_njrat_quasar-rat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_3e2e4ec8d7dac5ba67d46a1db9468ebe_blankgrabber_cobalt-strike_dosia_glassworm_icedid_njrat_quasar-rat_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_3e2e4ec8d7dac5ba67d46a1db9468ebe_blankgrabber_cobalt-strike_dosia_glassworm_icedid_njrat_quasar-rat_satacom
- Size 18.6MB
- SHA256 4fb30e22c2334c0247bc38941400c4df2b9d3e88c2594fa3551e56c1c4fc7f3f
- MD5 3e2e4ec8d7dac5ba67d46a1db9468ebe
- SHA1 8711db18914467f9d36bd7b5af2fa9dd05c7d704
- SHA512 477bb3c8dc6f67234e8efe639d40768c2e0d09970f1425b31a84cabdf40720af45b5e1b86354a98d0fd7899976259172fd07d58a2f61be454b1e395ba486ac38
- SSDEEP 393216:k85vzi/m3pHQ3Hxv0BAZFIxxdBs+s+aq+ZkFQJ4KNAx0cG4a6cnRUsSx:H5vziKwXhtsxJiCk4K69pcRUsk
- TLSH T14317330961B08ADED6F9D23BCA47D528E2D274619B74C1CFC288BB521D274E19A37F1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
Loads dropped DLL