General
- Target 2026-07-30_d378df3d0b4471da872363f21e784822_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 22.6MB
- Sample260730-xs25caer8x
- SHA256 0ad70376d5efb39fabf983380af12d9c26458edb1a02a8382310197b46f7f976
- MD5 d378df3d0b4471da872363f21e784822
- SHA1 32124f31d05a982ca4ecb9ed3279f1e959f816f6
- SHA512 ce11fac89aee5d0b89da7103fd2ebc68123de72f9d34ce08026c08113491a095ec864f2c5b97caa2e52a2d3cb7af01868869567775106c36bacb71ba8fe27b02
- SSDEEP 393216:/Cz1E1C/TdfsB1TcdCS0MpPeMpPWPXEAphVtq9TFgthnk0WZMcZ2nYo1IZPKb737:/CJEgTdfEpcZ04Pe4PuRpheutJuZ2nYn
- TLSH T1B937F1C63E658E8FC362773509F5F73849BC4ED43F028B429931B2917C32A496EA15E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-30_d378df3d0b4471da872363f21e784822_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_d378df3d0b4471da872363f21e784822_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_d378df3d0b4471da872363f21e784822_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 22.6MB
- SHA256 0ad70376d5efb39fabf983380af12d9c26458edb1a02a8382310197b46f7f976
- MD5 d378df3d0b4471da872363f21e784822
- SHA1 32124f31d05a982ca4ecb9ed3279f1e959f816f6
- SHA512 ce11fac89aee5d0b89da7103fd2ebc68123de72f9d34ce08026c08113491a095ec864f2c5b97caa2e52a2d3cb7af01868869567775106c36bacb71ba8fe27b02
- SSDEEP 393216:/Cz1E1C/TdfsB1TcdCS0MpPeMpPWPXEAphVtq9TFgthnk0WZMcZ2nYo1IZPKb737:/CJEgTdfEpcZ04Pe4PuRpheutJuZ2nYn
- TLSH T1B937F1C63E658E8FC362773509F5F73849BC4ED43F028B429931B2917C32A496EA15E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.