General
- Target 2026-08-03_4ead52fd99c8264ca0bb618eb7483827_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 73.8MB
- Sample260804-dfct5s1bmb
- SHA256 9415c2dd427d4c7f82cc45d5d2fc53c8c9b6c95a05247304a75edd15e2d6e1cb
- MD5 4ead52fd99c8264ca0bb618eb7483827
- SHA1 f085a6952d5be6ceb62746d0e7037af9eca50d33
- SHA512 65edb398189c2696f9fb5b000809ded079ac5307f2eb4640ea65d3933265cff9bb5d12b79deb5e69048aeea7a1b69b7ee53dae987b3e25e72f23ee120f94161e
- SSDEEP 1572864:WjS5I3P3R8fNknAnZ2yOogqTcaNH21A/5gG+BDOEHsOmbwaQPhD7jeYQSm:WsI/h8fNknAnIdA7lxCGkHsjHQPhDmY4
- TLSH T1410833C9AFC5409AF9DA833A6112D527AD70E68E4B9B046B53F80C331B273D9A57D930
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-03_4ead52fd99c8264ca0bb618eb7483827_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_4ead52fd99c8264ca0bb618eb7483827_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_4ead52fd99c8264ca0bb618eb7483827_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 73.8MB
- SHA256 9415c2dd427d4c7f82cc45d5d2fc53c8c9b6c95a05247304a75edd15e2d6e1cb
- MD5 4ead52fd99c8264ca0bb618eb7483827
- SHA1 f085a6952d5be6ceb62746d0e7037af9eca50d33
- SHA512 65edb398189c2696f9fb5b000809ded079ac5307f2eb4640ea65d3933265cff9bb5d12b79deb5e69048aeea7a1b69b7ee53dae987b3e25e72f23ee120f94161e
- SSDEEP 1572864:WjS5I3P3R8fNknAnZ2yOogqTcaNH21A/5gG+BDOEHsOmbwaQPhD7jeYQSm:WsI/h8fNknAnIdA7lxCGkHsjHQPhDmY4
- TLSH T1410833C9AFC5409AF9DA833A6112D527AD70E68E4B9B046B53F80C331B273D9A57D930
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.