General
- Target 2026-07-30_731a4e570510a68c7e4001f78e1b1e13_blankgrabber_cobalt-strike_dosia_glassworm_icedid_njrat_quasar-rat_satacom
- Size 10.7MB
- Sample260730-dv79lacj7v
- SHA256 a539812359fe4c2a8de48e773c915786b54f5ad5a3429158c15e740be63f846a
- MD5 731a4e570510a68c7e4001f78e1b1e13
- SHA1 7daf0e8eea2e8f087dd4f72dcfe2a1d9bb55c5f8
- SHA512 638f17e3ccf0f1b2bf86306228b4151efc3de5a29e7533c8f42d37b920f84132f9cb7411a7e8006f129772648b5afff4c605359c11b21aa8cf9d859e7d4be208
- SSDEEP 196608:dg9+0xbAQ+fz9AZlLITbBmEkwvIP/4B0r+5twq+ZkiKDIRX/O2Ax0vLlFF:dYlx+BAZFIxxdBs+5aq+ZkFcNAx0zlD
- TLSH T152B63304F17089FDD5A7967ECA93D914E1F130619FB4C1CB8BA8EB622E179E08935F18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
2026-07-30_731a4e570510a68c7e4001f78e1b1e13_blankgrabber_cobalt-strike_dosia_glassworm_icedid_njrat_quasar-rat_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_731a4e570510a68c7e4001f78e1b1e13_blankgrabber_cobalt-strike_dosia_glassworm_icedid_njrat_quasar-rat_satacom.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_731a4e570510a68c7e4001f78e1b1e13_blankgrabber_cobalt-strike_dosia_glassworm_icedid_njrat_quasar-rat_satacom
- Size 10.7MB
- SHA256 a539812359fe4c2a8de48e773c915786b54f5ad5a3429158c15e740be63f846a
- MD5 731a4e570510a68c7e4001f78e1b1e13
- SHA1 7daf0e8eea2e8f087dd4f72dcfe2a1d9bb55c5f8
- SHA512 638f17e3ccf0f1b2bf86306228b4151efc3de5a29e7533c8f42d37b920f84132f9cb7411a7e8006f129772648b5afff4c605359c11b21aa8cf9d859e7d4be208
- SSDEEP 196608:dg9+0xbAQ+fz9AZlLITbBmEkwvIP/4B0r+5twq+ZkiKDIRX/O2Ax0vLlFF:dYlx+BAZFIxxdBs+5aq+ZkFcNAx0zlD
- TLSH T152B63304F17089FDD5A7967ECA93D914E1F130619FB4C1CB8BA8EB622E179E08935F18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Loads dropped DLL