521252eb7128691e356ad9a2eff5893fdc2bb74b71ec25fe119ad9f6b0d3f7ab

General

Target
2026-08-04_81f534ca091cdb907a7106977ab58703_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
Size 17.2MB
Sample260804-2nalrascjc
SHA256 521252eb7128691e356ad9a2eff5893fdc2bb74b71ec25fe119ad9f6b0d3f7ab
MD5 81f534ca091cdb907a7106977ab58703
SHA1 dcacedcb3e0378345fa047ae410fdd695095037d
SHA512 8920f27f654a35120dafa0aaf9c0c064892418146d50c3399b80110e1496e3ad0fc12e1746a9361da21b12a0dd27324c64036414a723478f82e71a96ee5dfb46
SSDEEP 393216:+DpOGgIfUKOc6XEAphVtz0gkGwEhFyzChdLu/+VVVf/ooz:MOG58KP6Rphdkgfyz6f3oo
TLSH
T1D107335CD61004B7F8EB813D81A2CD25E77335955381C5FB0BF289632E6B2E65E392AC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Malware Config

Targets

- Target
  2026-08-04_81f534ca091cdb907a7106977ab58703_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 17.2MB
- SHA256 521252eb7128691e356ad9a2eff5893fdc2bb74b71ec25fe119ad9f6b0d3f7ab
- MD5 81f534ca091cdb907a7106977ab58703
- SHA1 dcacedcb3e0378345fa047ae410fdd695095037d
- SHA512 8920f27f654a35120dafa0aaf9c0c064892418146d50c3399b80110e1496e3ad0fc12e1746a9361da21b12a0dd27324c64036414a723478f82e71a96ee5dfb46
- SSDEEP 393216:+DpOGgIfUKOc6XEAphVtz0gkGwEhFyzChdLu/+VVVf/ooz:MOG58KP6Rphdkgfyz6f3oo
- TLSH
  T1D107335CD61004B7F8EB813D81A2CD25E77335955381C5FB0BF289632E6B2E65E392AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion discovery spyware stealer
- Enumerates VirtualBox DLL files
- Enumerates VirtualBox registry keys
  defense_evasion
- Looks for VirtualBox Guest Additions in registry
  defense_evasion
- Looks for VirtualBox drivers on disk
  defense_evasion
- Looks for VMWare Tools registry key
  defense_evasion
- Looks for VMWare drivers on disk
  defense_evasion
- Looks for VMWare services registry key.
  defense_evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2