Analysis
- max time kernel
89s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/08/2026, 11:15
Behavioral task
behavioral1
Sample
2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
- Size 9.1MB
- Sample260803-ncymjsvhpg
- SHA256 c6b47cf69ad68c9d4314f021c503852e55189e8b21f4a991b86d9f7e605d18fc
- MD5 ad1151d4dc1b9618077cb07b6000ad53
- SHA1 e66f60aafce9d44c78a829ed2d1294de18e48314
- SHA512 6dd5c4e756cfcbcad1cd809a9cdb2a7e3ba057fc9341d6834a634f28d94354a5efe7e6b073a53bf88a02507c162825659a463fdc257d4a49c13f7d32cf393966
- SSDEEP 196608:Vs7NTwhLLDA1HeT39IigwqtauDXURuAEk0ax8ZSEpQmDS:q8L41+TtIiFq8uARuAUax6SEpQmDS
- TLSH T176A633A992A105B8E9F6863E82ABC13DD6327857432AD2DB13D00A533F17BF14D39F51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 64 IoCs
pid Process 3460 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 3460 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 3460 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 3460 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 3460 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 3460 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 3460 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 3460 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 3460 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 3460 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 3460 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 3460 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 3460 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 3460 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 3460 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 3460 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 4304 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 4304 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 4304 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 4304 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 4304 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 4304 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 4304 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 4304 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 4304 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 4304 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 4304 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 4304 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 4304 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 4304 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 4304 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 6000 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 6000 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 6000 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 6000 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 6000 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 6000 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 6000 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 6000 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 6000 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 6000 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 6000 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 6000 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 6000 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 6000 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 6000 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 5060 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 5060 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 5060 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 5060 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 5060 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 5060 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 5060 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 5060 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 5060 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 5060 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 5060 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 5060 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 5060 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 5060 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 5060 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 2536 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 2536 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 2536 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 6052 wrote to memory of 3460 6052 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 90 PID 3460 wrote to memory of 4304 3460 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 91 PID 4304 wrote to memory of 6000 4304 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 93 PID 6000 wrote to memory of 5060 6000 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 95 PID 5060 wrote to memory of 2536 5060 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 97 PID 2536 wrote to memory of 120 2536 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 99 PID 120 wrote to memory of 3056 120 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 101 PID 3056 wrote to memory of 3152 3056 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 103 PID 3152 wrote to memory of 5748 3152 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 105 PID 5748 wrote to memory of 696 5748 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 107 PID 696 wrote to memory of 2980 696 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 109 PID 2980 wrote to memory of 2404 2980 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 111 PID 2404 wrote to memory of 1724 2404 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 113 PID 1724 wrote to memory of 3524 1724 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 115 PID 3524 wrote to memory of 4064 3524 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 117 PID 4064 wrote to memory of 4952 4064 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 119 PID 4952 wrote to memory of 3260 4952 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 121 PID 3260 wrote to memory of 3416 3260 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 123 PID 3416 wrote to memory of 1264 3416 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 125 PID 1264 wrote to memory of 3532 1264 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 127 PID 3532 wrote to memory of 1800 3532 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 129 PID 1800 wrote to memory of 5448 1800 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 131 PID 5448 wrote to memory of 3424 5448 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 133 PID 3424 wrote to memory of 1812 3424 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 135 PID 1812 wrote to memory of 1328 1812 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 137 PID 1328 wrote to memory of 4260 1328 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 139 PID 4260 wrote to memory of 2984 4260 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 141 PID 2984 wrote to memory of 2664 2984 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 143 PID 2664 wrote to memory of 2916 2664 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 145 PID 2916 wrote to memory of 4748 2916 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 147 PID 4748 wrote to memory of 4168 4748 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 149 PID 4168 wrote to memory of 1704 4168 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 151 PID 1704 wrote to memory of 1880 1704 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 153 PID 1880 wrote to memory of 2056 1880 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 155 PID 2056 wrote to memory of 2764 2056 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 157 PID 2764 wrote to memory of 1036 2764 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 159 PID 2188 wrote to memory of 4424 2188 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 163 PID 4424 wrote to memory of 4204 4424 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 165 PID 4204 wrote to memory of 4180 4204 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 167 PID 4180 wrote to memory of 5984 4180 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 169 PID 5984 wrote to memory of 3064 5984 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 171 PID 3064 wrote to memory of 2576 3064 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 173 PID 2576 wrote to memory of 6112 2576 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 175 PID 6112 wrote to memory of 4392 6112 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 177 PID 4392 wrote to memory of 3048 4392 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 179 PID 3048 wrote to memory of 6048 3048 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 181 PID 6048 wrote to memory of 2624 6048 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 183 PID 2624 wrote to memory of 5980 2624 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 185 PID 5980 wrote to memory of 1252 5980 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 187 PID 1252 wrote to memory of 1244 1252 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 189 PID 1244 wrote to memory of 708 1244 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 191 PID 708 wrote to memory of 756 708 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 193 PID 756 wrote to memory of 2900 756 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 195 PID 2900 wrote to memory of 5596 2900 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 197 PID 5596 wrote to memory of 724 5596 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 199 PID 724 wrote to memory of 6156 724 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 201 PID 6156 wrote to memory of 6208 6156 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 203 PID 6208 wrote to memory of 6260 6208 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 205 PID 6260 wrote to memory of 6320 6260 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 207 PID 6320 wrote to memory of 6372 6320 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 209 PID 6372 wrote to memory of 6424 6372 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 211 PID 6424 wrote to memory of 6472 6424 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 213 PID 6472 wrote to memory of 6528 6472 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 215 PID 6528 wrote to memory of 6584 6528 2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe 217
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:6052 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe"2⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:3460 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check3⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:4304 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check4⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:6000 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check5⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:5060 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check6⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2536 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check7⤵
- Suspicious use of WriteProcessMemory
PID:120 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check8⤵
- Suspicious use of WriteProcessMemory
PID:3056 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check9⤵
- Suspicious use of WriteProcessMemory
PID:3152 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check10⤵
- Suspicious use of WriteProcessMemory
PID:5748 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check11⤵
- Suspicious use of WriteProcessMemory
PID:696 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check12⤵
- Suspicious use of WriteProcessMemory
PID:2980 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check13⤵
- Suspicious use of WriteProcessMemory
PID:2404 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check14⤵
- Suspicious use of WriteProcessMemory
PID:1724 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check15⤵
- Suspicious use of WriteProcessMemory
PID:3524 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check16⤵
- Suspicious use of WriteProcessMemory
PID:4064 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check17⤵
- Suspicious use of WriteProcessMemory
PID:4952 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check18⤵
- Suspicious use of WriteProcessMemory
PID:3260 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check19⤵
- Suspicious use of WriteProcessMemory
PID:3416 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check20⤵
- Suspicious use of WriteProcessMemory
PID:1264 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check21⤵
- Suspicious use of WriteProcessMemory
PID:3532 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check22⤵
- Suspicious use of WriteProcessMemory
PID:1800 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check23⤵
- Suspicious use of WriteProcessMemory
PID:5448 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check24⤵
- Suspicious use of WriteProcessMemory
PID:3424 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check25⤵
- Suspicious use of WriteProcessMemory
PID:1812 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check26⤵
- Suspicious use of WriteProcessMemory
PID:1328 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check27⤵
- Suspicious use of WriteProcessMemory
PID:4260 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check28⤵
- Suspicious use of WriteProcessMemory
PID:2984 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check29⤵
- Suspicious use of WriteProcessMemory
PID:2664 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check30⤵
- Suspicious use of WriteProcessMemory
PID:2916 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check31⤵
- Suspicious use of WriteProcessMemory
PID:4748 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check32⤵
- Suspicious use of WriteProcessMemory
PID:4168 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check33⤵
- Suspicious use of WriteProcessMemory
PID:1704 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check34⤵
- Suspicious use of WriteProcessMemory
PID:1880 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check35⤵
- Suspicious use of WriteProcessMemory
PID:2056 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check36⤵
- Suspicious use of WriteProcessMemory
PID:2764 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check37⤵PID:1036
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check38⤵
- Suspicious use of WriteProcessMemory
PID:2188 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check39⤵
- Suspicious use of WriteProcessMemory
PID:4424 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check40⤵
- Suspicious use of WriteProcessMemory
PID:4204 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check41⤵
- Suspicious use of WriteProcessMemory
PID:4180 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check42⤵
- Suspicious use of WriteProcessMemory
PID:5984 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check43⤵
- Suspicious use of WriteProcessMemory
PID:3064 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check44⤵
- Suspicious use of WriteProcessMemory
PID:2576 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check45⤵
- Suspicious use of WriteProcessMemory
PID:6112 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check46⤵
- Suspicious use of WriteProcessMemory
PID:4392 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check47⤵
- Suspicious use of WriteProcessMemory
PID:3048 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check48⤵
- Suspicious use of WriteProcessMemory
PID:6048 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check49⤵
- Suspicious use of WriteProcessMemory
PID:2624 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check50⤵
- Suspicious use of WriteProcessMemory
PID:5980 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check51⤵
- Suspicious use of WriteProcessMemory
PID:1252 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check52⤵
- Suspicious use of WriteProcessMemory
PID:1244 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check53⤵
- Suspicious use of WriteProcessMemory
PID:708 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check54⤵
- Suspicious use of WriteProcessMemory
PID:756 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check55⤵
- Suspicious use of WriteProcessMemory
PID:2900 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check56⤵
- Suspicious use of WriteProcessMemory
PID:5596 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check57⤵
- Suspicious use of WriteProcessMemory
PID:724 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check58⤵
- Suspicious use of WriteProcessMemory
PID:6156 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check59⤵
- Suspicious use of WriteProcessMemory
PID:6208 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check60⤵
- Suspicious use of WriteProcessMemory
PID:6260 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check61⤵
- Suspicious use of WriteProcessMemory
PID:6320 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check62⤵
- Suspicious use of WriteProcessMemory
PID:6372 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check63⤵
- Suspicious use of WriteProcessMemory
PID:6424 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check64⤵
- Suspicious use of WriteProcessMemory
PID:6472 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check65⤵
- Suspicious use of WriteProcessMemory
PID:6528 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check66⤵PID:6584
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check67⤵PID:6632
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check68⤵PID:6680
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check69⤵PID:6728
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check70⤵PID:6800
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check71⤵PID:6852
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check72⤵PID:6900
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check73⤵PID:6952
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check74⤵PID:7000
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check75⤵PID:7048
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check76⤵PID:7096
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check77⤵PID:7144
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check78⤵PID:2560
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check79⤵PID:1260
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check80⤵PID:6756
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check81⤵PID:7016
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check82⤵PID:6816
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check83⤵PID:7208
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check84⤵PID:7256
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check85⤵PID:7304
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check86⤵PID:7352
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check87⤵PID:7400
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check88⤵PID:7448
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check89⤵PID:7496
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check90⤵PID:7544
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check91⤵PID:7592
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check92⤵PID:7640
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check93⤵PID:7692
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check94⤵PID:7740
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check95⤵PID:7796
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check96⤵PID:7844
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check97⤵PID:7892
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check98⤵PID:7944
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check99⤵PID:7996
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check100⤵PID:8044
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check101⤵PID:8092
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check102⤵PID:8140
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check103⤵PID:8188
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check104⤵PID:7564
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check105⤵PID:7872
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check106⤵PID:8120
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check107⤵PID:8204
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check108⤵PID:8252
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check109⤵PID:8300
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check110⤵PID:8348
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check111⤵PID:8396
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check112⤵PID:8444
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check113⤵PID:8496
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check114⤵PID:8544
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check115⤵PID:8596
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check116⤵PID:8644
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check117⤵PID:8692
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check118⤵PID:8740
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check119⤵PID:8792
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check120⤵PID:8840
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check121⤵PID:8888
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exeC:\Users\Admin\AppData\Local\Temp\2026-08-03_ad1151d4dc1b9618077cb07b6000ad53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install discord.py --quiet --disable-pip-version-check122⤵PID:8936
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-