General
- Target 2026-08-03_5730694d45f6d752ef8dac5d7e18ba4b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 14.8MB
- Sample260804-dd46ls1bka
- SHA256 193b7a4943502b35ef579c9f9d7125185b3d66539b5f9910e4e01a079a8f0e05
- MD5 5730694d45f6d752ef8dac5d7e18ba4b
- SHA1 97afb20913579a2dc2dda5e9c06768eef3045573
- SHA512 61ae404d73570edd25c7dff696d4dfad79b7f39f8a5653c2ac41a457ee18f34e0ab24e2d2f4098d2287ddc4e2f33f02d6865eb9e58c039652dc2398f1a97fc11
- SSDEEP 393216:KhL1F99nXEAphVtnIUQSg+6FoIykzFt7LvF7dvplM:apvZRphDto+WoIygFtPvF7S
- TLSH T114F633D477840E65E4EA513DA8C09A22A3F1B5412FA5D3EF0BF10D610E776D8EE78B90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-03_5730694d45f6d752ef8dac5d7e18ba4b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_5730694d45f6d752ef8dac5d7e18ba4b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 14.8MB
- SHA256 193b7a4943502b35ef579c9f9d7125185b3d66539b5f9910e4e01a079a8f0e05
- MD5 5730694d45f6d752ef8dac5d7e18ba4b
- SHA1 97afb20913579a2dc2dda5e9c06768eef3045573
- SHA512 61ae404d73570edd25c7dff696d4dfad79b7f39f8a5653c2ac41a457ee18f34e0ab24e2d2f4098d2287ddc4e2f33f02d6865eb9e58c039652dc2398f1a97fc11
- SSDEEP 393216:KhL1F99nXEAphVtnIUQSg+6FoIykzFt7LvF7dvplM:apvZRphDto+WoIygFtPvF7S
- TLSH T114F633D477840E65E4EA513DA8C09A22A3F1B5412FA5D3EF0BF10D610E776D8EE78B90
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.