General
- Target 2026-08-03_040d389ece1ca83eaa05305014a8cc8c_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 105.7MB
- Sample260804-d589mscd75
- SHA256 d4e69c301025dab258989e668c9ba4da68b632d503659879dc2a7b4d4c357b4e
- MD5 040d389ece1ca83eaa05305014a8cc8c
- SHA1 ac1d2625a1c31f3fdd225f5334ebc7525b19a902
- SHA512 d5bf92999bacf65cf661330db4fd6b5cd331fa2f21ef53084f2a101f1baf6665f90555a0ea26c0d778ed3296395a84a01edf2b74a2a073a923792559174053db
- SSDEEP 1572864:bqrTIAikXJVrvo2pUg9NoX0RpVdw+vWlM9ojCrD4WWJvKSc/JUNnzPhOOThF+F45:Opv7ig9NXzBelKbDSc/iFzLFfg
- TLSH T1033833906F00D586E4AE823A96D08E51E4B778BE7AC297DB13F001761CAB3C4497DF67
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_040d389ece1ca83eaa05305014a8cc8c_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_040d389ece1ca83eaa05305014a8cc8c_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_040d389ece1ca83eaa05305014a8cc8c_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 105.7MB
- SHA256 d4e69c301025dab258989e668c9ba4da68b632d503659879dc2a7b4d4c357b4e
- MD5 040d389ece1ca83eaa05305014a8cc8c
- SHA1 ac1d2625a1c31f3fdd225f5334ebc7525b19a902
- SHA512 d5bf92999bacf65cf661330db4fd6b5cd331fa2f21ef53084f2a101f1baf6665f90555a0ea26c0d778ed3296395a84a01edf2b74a2a073a923792559174053db
- SSDEEP 1572864:bqrTIAikXJVrvo2pUg9NoX0RpVdw+vWlM9ojCrD4WWJvKSc/JUNnzPhOOThF+F45:Opv7ig9NXzBelKbDSc/iFzLFfg
- TLSH T1033833906F00D586E4AE823A96D08E51E4B778BE7AC297DB13F001761CAB3C4497DF67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables Task Manager via registry modification
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application