Overview

overview

7

Static

static

3

2026-07-30...om.exe

windows10-2004-x64

7

2026-07-30...om.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    151s
  • max time network
    143s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/07/2026, 19:07

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-30_d378df3d0b4471da872363f21e784822_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
  • Size 22.6MB
  • Sample260730-xs25caer8x
  • SHA256 0ad70376d5efb39fabf983380af12d9c26458edb1a02a8382310197b46f7f976
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 23 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-30_d378df3d0b4471da872363f21e784822_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-30_d378df3d0b4471da872363f21e784822_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2912
    • C:\Users\Admin\AppData\Local\Temp\2026-07-30_d378df3d0b4471da872363f21e784822_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-07-30_d378df3d0b4471da872363f21e784822_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      PID:3436

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\_bz2.pyd
        • Size 84KB
        • SHA256 275fc2a276af452599d24177ebe2cf9e374b956e79882146e9d93778cd6fca78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\_ctypes.pyd
        • Size 138KB
        • SHA256 0d703202e936cdb451b22e299f9c08ab5c33a87772ffc7c9a68eaeec0d28f2c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\_hashlib.pyd
        • Size 71KB
        • SHA256 2ce1f9ee2e6f402e4a036a413e79ca6e4751885d375e1975c21c43626922c536
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\_lzma.pyd
        • Size 167KB
        • SHA256 8f586b927bafb0cfd58396d595c42b142261e8f46cb5d7fca4cae3d9a9fdab82
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\_socket.pyd
        • Size 86KB
        • SHA256 4e6f34190262676f20879a80605a5598fb7cec8da7719a99c3a6557ee9f59c3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\_ssl.pyd
        • Size 192KB
        • SHA256 bfc6258fecf2147b2b3a17459748e3a3e5adc29b25a2cd5076cbe544b00753a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _tkinter.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\_tkinter.pyd
        • Size 69KB
        • SHA256 ab58340bb7c6731effabcba05864f47b6359002ef4689fe569f6753c6563933e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\_wmi.pyd
        • Size 38KB
        • SHA256 45dd8d2be03525c7f3b24967389d51a497e8047e321ac593668fdcb88bdadb52
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _zstd.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\_zstd.pyd
        • Size 494KB
        • SHA256 a91ff355cffae14997473aa6466cd6c9afcd7a5fa43d473dbd959e1c73637188
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\base_library.zip
        • Size 1.4MB
        • SHA256 fbc27ead07ffa4bc6f0d54467e3eb3795edddf834da2a6cb5e26b47ea3111e16
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        blue.json
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\customtkinter\assets\themes\blue.json
        • Size 4KB
        • SHA256 a9c10c997a2281b57b60ff9325c9c0b2dbebe498722f3fbc7c585ec9fe1aa352
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\libcrypto-3.dll
        • Size 6.0MB
        • SHA256 53c529145339fb042a3dcd3a09c2d7753204f8b4fc79d99e0d31e69a33985958
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\libssl-3.dll
        • Size 1.3MB
        • SHA256 b17a87979862d19241edc4318f967e24c3ec356ed6c2368f561179fab2311001
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libtommath.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\libtommath.dll
        • Size 79KB
        • SHA256 2d760fefb452665b6af8c8d9d29f3a8378f10fc0847cdd9938ea0cb5edf1d573
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mondy_icon.ico
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\mondy_icon.ico
        • Size 4.1MB
        • SHA256 03daa246f0d35ccd0b56a40cf895644a73db3ace08f52a2499fbfd33fa540a01
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _psutil_windows.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\psutil\_psutil_windows.pyd
        • Size 69KB
        • SHA256 0035450801bd7d938e9e146c5ec28e619cb5a5f4a18cdc53ac7e9734c7f94f78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\python3.dll
        • Size 74KB
        • SHA256 b21d396c061e05cd1798b80aeb78e5c93ddbff8ee92e056130fd8cdcb6c5dede
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python315.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\python315.dll
        • Size 7.5MB
        • SHA256 a7cb70d14200ecc280886042d308897bf482c8e823eea5041d9ab70214b2f08e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tcl90.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\tcl90.dll
        • Size 3.2MB
        • SHA256 3a2821f869ac3cd06dadedacd90b10f786ab8495a9052666b8e5555fbe68897b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tcl9tk90.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\tcl9tk90.dll
        • Size 2.5MB
        • SHA256 9c562a234df72ec1d4b52db9baf5021d093fcbdca484b08c2b40ac53c12e7a06
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\unicodedata.pyd
        • Size 733KB
        • SHA256 372604f66f8e911c0ca574feacbb7b955c9d82859d56ca451c9736b9a150311d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zlib1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29122\zlib1.dll
        • Size 100KB
        • SHA256 04117778e255ed158cf6a4a1e51aa40f49124d9035208218fbfebbe565cf254d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/3436-298-0x00000224B7090000-0x00000224B732E000-memory.dmp
        Download