Overview

overview

7

Static

static

3

2026-08-03...om.exe

windows10-2004-x64

7

2026-08-03...om.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    04/08/2026, 13:06

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-03_0d5efbe1021adc1f11644279176ad7ea_blankgrabber_cobalt-strike_dosia_glassworm_icedid_njrat_quasar-rat_satacom.exe
  • Size 52.6MB
  • Sample260804-qcb5na1ekf
  • SHA256 d48df0bb6a0bbc86cbf2d72925a33f6be1cbdfba6d33c1e852d48d3acdb48102
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 21 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-03_0d5efbe1021adc1f11644279176ad7ea_blankgrabber_cobalt-strike_dosia_glassworm_icedid_njrat_quasar-rat_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-03_0d5efbe1021adc1f11644279176ad7ea_blankgrabber_cobalt-strike_dosia_glassworm_icedid_njrat_quasar-rat_satacom.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4484
    • C:\Users\Admin\AppData\Local\Temp\2026-08-03_0d5efbe1021adc1f11644279176ad7ea_blankgrabber_cobalt-strike_dosia_glassworm_icedid_njrat_quasar-rat_satacom.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-03_0d5efbe1021adc1f11644279176ad7ea_blankgrabber_cobalt-strike_dosia_glassworm_icedid_njrat_quasar-rat_satacom.exe"
      2⤵
      • Loads dropped DLL
      PID:5144

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        _imaging.cp314-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\PIL\_imaging.cp314-win_amd64.pyd
        • Size 2.5MB
        • SHA256 b4e06283c347910b5973bd5732159ea9eb26eda48e3eed183be2e3382db26597
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _imagingmath.cp314-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\PIL\_imagingmath.cp314-win_amd64.pyd
        • Size 25KB
        • SHA256 a1c024d3e0e75802e3249a1a33335809b6cf032749ed2c4507d622d6610e36f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\_bz2.pyd
        • Size 86KB
        • SHA256 4a61ac9bf837c47f218e2c61c9ce86db151737bf11ff9501238c9abe06e0b052
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\_ctypes.pyd
        • Size 139KB
        • SHA256 af5ed17e345f76366af65eff145753d3b0a3f48693c015b1eb539c0d2e3d545b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\_hashlib.pyd
        • Size 67KB
        • SHA256 45837e6ba66b3d35b43530a6af3deece3da2fe3ffb55f049f9da4bb3a1bde5ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\_lzma.pyd
        • Size 157KB
        • SHA256 73b30810cd37d7938360e613b41e9fe120c46f847adcb85b9f98bbfe2f2a4145
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\_queue.pyd
        • Size 35KB
        • SHA256 9cbcfc342f607f976c785fb431e3a15ec2e71adcfb2c39b067b546c586488abf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\_socket.pyd
        • Size 85KB
        • SHA256 83abf14d36467f21b991fd7686fa672954d9c52040d311dd267e1154dcb1e042
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\_ssl.pyd
        • Size 180KB
        • SHA256 010b70aa182143dca9cccd1d9476552c35f5d96ce0d9a2a0906b75b0d3df0a9b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\_wmi.pyd
        • Size 39KB
        • SHA256 bba57c6a21dfb3724f4375a0da3e4876a2060c3e6e37129c6ee56f3589825b07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _zstd.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\_zstd.pyd
        • Size 491KB
        • SHA256 fb639f152d25e2b3864b2007e242d7e93043c46e21662895d6ebe88d2ae45239
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\base_library.zip
        • Size 1.3MB
        • SHA256 2878823c4c0b263e24b3c7f746cad3ee056d002d041a760b60cf3a03b426d583
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 8b27ebae75cc99f20075322446af36c9ffcb4e3b400a77d712ef43f007f47f7d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\libssl-3.dll
        • Size 776KB
        • SHA256 56dd50fb903b860ace831d0cd6c6250cd57e8655867c3a0fa16eac2d4cc0ba0b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.DLL
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\python3.DLL
        • Size 72KB
        • SHA256 697526f0e6a7346059e48ace51d91c2cb184631f473e3ba781c3406692153112
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python314.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\python314.dll
        • Size 6.5MB
        • SHA256 b1e3f08b8714374c0c3956dabb869f3be64b905f7d8180bcd0918550b5449eef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\ucrtbase.dll
        • Size 1.1MB
        • SHA256 c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\unicodedata.pyd
        • Size 740KB
        • SHA256 15cadf8d75936910a931be5fa8054edf0de16e2fab614539dd80a8281936346a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/5144-156-0x0000014F497E0000-0x0000014F497E1000-memory.dmp
        Download