General
- Target 2026-08-03_d18c4526de06fc699fee92b87e946fbd_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 9.1MB
- Sample260803-vckh9acd63
- SHA256 38a28e21cb82ab98661ab7465bd51eb707e1cfc3c872747a21c2b98373378520
- MD5 d18c4526de06fc699fee92b87e946fbd
- SHA1 ef9c17410896c9a2fd2ea73488d59fba4a7c6f35
- SHA512 38566601ff07c193cff67388a1e264b51d61dc18629272d929bb7b1c3bcd168bbeefcee42fb3881e8ab907dacf991870da9ec293d785db3cc351e0ece48b2b45
- SSDEEP 196608:K0YbqXtbW897G+x7eovq5XMP6PzFcGCMPWhQHHsoqYbkjMFb:zYbqX1Fdq1B7/zCQHHsoqYbQib
- TLSH T17CA6334D42D105E6F4A7F23E46A7A492C1B274101B32C9EF0B94936E2F6B3F25D36B91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-03_d18c4526de06fc699fee92b87e946fbd_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_d18c4526de06fc699fee92b87e946fbd_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
exe.dropper
https://files.catbox.moe/q88vvs.bin
Targets
-
- Target 2026-08-03_d18c4526de06fc699fee92b87e946fbd_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 9.1MB
- SHA256 38a28e21cb82ab98661ab7465bd51eb707e1cfc3c872747a21c2b98373378520
- MD5 d18c4526de06fc699fee92b87e946fbd
- SHA1 ef9c17410896c9a2fd2ea73488d59fba4a7c6f35
- SHA512 38566601ff07c193cff67388a1e264b51d61dc18629272d929bb7b1c3bcd168bbeefcee42fb3881e8ab907dacf991870da9ec293d785db3cc351e0ece48b2b45
- SSDEEP 196608:K0YbqXtbW897G+x7eovq5XMP6PzFcGCMPWhQHHsoqYbkjMFb:zYbqX1Fdq1B7/zCQHHsoqYbQib
- TLSH T17CA6334D42D105E6F4A7F23E46A7A492C1B274101B32C9EF0B94936E2F6B3F25D36B91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Loads dropped DLL