General
- Target 2026-08-02_c3afd6edfd8fa8bf9dc7b601c3070d7d_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 12.2MB
- Sample260802-3qs2jstfkg
- SHA256 02fb7c9ea9748ec0ea2fe6e51a3520505297cf34d679cb8827bd93bc9ac10024
- MD5 c3afd6edfd8fa8bf9dc7b601c3070d7d
- SHA1 2c39ae517cf6b691d4f0f96129fbf69e61ce0e60
- SHA512 ac3f4cd60e6c110f6ac010f8dec0b0ad24cb9cef9f6a3c27d21424e397aa976dff1e34ff8f5806eb764dd011dfcdd5d37f6d799936bbb5070829ab71c545ae97
- SSDEEP 196608:JdTfHAEydtbW897G9r1LDsBTG9WdEeukZCMPWhzWQau/w0s69:bHFa1U3sB1CeXZzCzWQD40n9
- TLSH T1A3D63388336804D8F89F623E69D1856753E1B4310B21CADB4BF54E993E5B1FAEE34B41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-02_c3afd6edfd8fa8bf9dc7b601c3070d7d_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_c3afd6edfd8fa8bf9dc7b601c3070d7d_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_c3afd6edfd8fa8bf9dc7b601c3070d7d_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 12.2MB
- SHA256 02fb7c9ea9748ec0ea2fe6e51a3520505297cf34d679cb8827bd93bc9ac10024
- MD5 c3afd6edfd8fa8bf9dc7b601c3070d7d
- SHA1 2c39ae517cf6b691d4f0f96129fbf69e61ce0e60
- SHA512 ac3f4cd60e6c110f6ac010f8dec0b0ad24cb9cef9f6a3c27d21424e397aa976dff1e34ff8f5806eb764dd011dfcdd5d37f6d799936bbb5070829ab71c545ae97
- SSDEEP 196608:JdTfHAEydtbW897G9r1LDsBTG9WdEeukZCMPWhzWQau/w0s69:bHFa1U3sB1CeXZzCzWQD40n9
- TLSH T1A3D63388336804D8F89F623E69D1856753E1B4310B21CADB4BF54E993E5B1FAEE34B41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Loads dropped DLL