General
- Target 2026-08-03_4cf0df61c3f175291874c5a399127e69_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 12.3MB
- Sample260803-k9gthsshpf
- SHA256 1d5948476d1638eaae7801a2b29752153acb83861b19a77b505a42caa757927f
- MD5 4cf0df61c3f175291874c5a399127e69
- SHA1 ca526c90c2f1efb5b14778e87eb50251962e53cc
- SHA512 56b5d6db202c185fbb7da4add2a53ef8d64ec5069edf30ae80055e19c081859d6d743cb5c5d4f827fa1197b19a925143c0c64c3e84d5b6d5f02a6a8527ac6f50
- SSDEEP 196608:MLCuglJEWG2GurHmYMP/XRL25/x1w9c2hTsJUT+wOnOxd:aCuNWG2GuCtXA5/x1w9AU1
- TLSH T186D633B413E401CBFDE9D7389591D4B6A36ABE172B29C59343E48C920E532D1633A3E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-03_4cf0df61c3f175291874c5a399127e69_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_4cf0df61c3f175291874c5a399127e69_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_4cf0df61c3f175291874c5a399127e69_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 12.3MB
- SHA256 1d5948476d1638eaae7801a2b29752153acb83861b19a77b505a42caa757927f
- MD5 4cf0df61c3f175291874c5a399127e69
- SHA1 ca526c90c2f1efb5b14778e87eb50251962e53cc
- SHA512 56b5d6db202c185fbb7da4add2a53ef8d64ec5069edf30ae80055e19c081859d6d743cb5c5d4f827fa1197b19a925143c0c64c3e84d5b6d5f02a6a8527ac6f50
- SSDEEP 196608:MLCuglJEWG2GurHmYMP/XRL25/x1w9c2hTsJUT+wOnOxd:aCuNWG2GuCtXA5/x1w9AU1
- TLSH T186D633B413E401CBFDE9D7389591D4B6A36ABE172B29C59343E48C920E532D1633A3E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.