General
- Target 2026-08-02_15dbdba4f4a60c2ab57657c1a7ec6090_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 75.8MB
- Sample260802-1zdxwaxzhy
- SHA256 1fdbc2375716019bb46a869d223e23a2bfd4e5b5d205fb35b57717d3ca926f8e
- MD5 15dbdba4f4a60c2ab57657c1a7ec6090
- SHA1 24d5edf92baca46dd776dce306f9b30673a88dd4
- SHA512 ea3a17c874c72baf5a98e39ecb84b06c0c6e1156ff17c4cc4aaf9001cc36daccabb0fade3ce272cf66f654102446d5eb53180bde888217ffbe28c15b0a84fec8
- SSDEEP 1572864:UqY007YEUZl7XNyjhQR5QMJJ8R/E0/utd0xyzS6PhSOThxHC+dGJodELwbv+P:h0sEQlLgaR55oR/E0/kd0xw3rFxHyWbm
- TLSH T1050833C17E462796D9A805357080AD3692CA31CE5F73D6EF1FF166122E37780ABB09E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-02_15dbdba4f4a60c2ab57657c1a7ec6090_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_15dbdba4f4a60c2ab57657c1a7ec6090_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_15dbdba4f4a60c2ab57657c1a7ec6090_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 75.8MB
- SHA256 1fdbc2375716019bb46a869d223e23a2bfd4e5b5d205fb35b57717d3ca926f8e
- MD5 15dbdba4f4a60c2ab57657c1a7ec6090
- SHA1 24d5edf92baca46dd776dce306f9b30673a88dd4
- SHA512 ea3a17c874c72baf5a98e39ecb84b06c0c6e1156ff17c4cc4aaf9001cc36daccabb0fade3ce272cf66f654102446d5eb53180bde888217ffbe28c15b0a84fec8
- SSDEEP 1572864:UqY007YEUZl7XNyjhQR5QMJJ8R/E0/utd0xyzS6PhSOThxHC+dGJodELwbv+P:h0sEQlLgaR55oR/E0/kd0xw3rFxHyWbm
- TLSH T1050833C17E462796D9A805357080AD3692CA31CE5F73D6EF1FF166122E37780ABB09E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.