General
- Target 2026-08-04_8b5f45b47303926a3f4835193eb9190b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 40.6MB
- Sample260804-sfkx3stalg
- SHA256 b7b9ecf588e72e64de2221c8d372c5edce99d7ddccb3847a2679af7c09eb08b7
- MD5 8b5f45b47303926a3f4835193eb9190b
- SHA1 90822a107a6da984dc85c9a66e529020e9d6385a
- SHA512 9c71e46ac75377faa2a5f4b60d77b486b8d7229c94e1622e146205ef9870784eaa584611c6f688e48503507abab98dda6f95c275c727a9312db1e3b568539284
- SSDEEP 786432:D5vz2ujmF/XktzEW83kRaGziuilgCObLLsKMMo5ovsVuNwZHjlvV/M8+4VmwBcqu:D9z2XZkZEWGl0iziC3oeSqjw8+hwBjmZ
- TLSH T19597338C73A41C9AE5F5D237A0D7D91A5B54B1122BE1CCCF87B819121CE72E9BD7AE00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-04_8b5f45b47303926a3f4835193eb9190b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_8b5f45b47303926a3f4835193eb9190b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_8b5f45b47303926a3f4835193eb9190b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 40.6MB
- SHA256 b7b9ecf588e72e64de2221c8d372c5edce99d7ddccb3847a2679af7c09eb08b7
- MD5 8b5f45b47303926a3f4835193eb9190b
- SHA1 90822a107a6da984dc85c9a66e529020e9d6385a
- SHA512 9c71e46ac75377faa2a5f4b60d77b486b8d7229c94e1622e146205ef9870784eaa584611c6f688e48503507abab98dda6f95c275c727a9312db1e3b568539284
- SSDEEP 786432:D5vz2ujmF/XktzEW83kRaGziuilgCObLLsKMMo5ovsVuNwZHjlvV/M8+4VmwBcqu:D9z2XZkZEWGl0iziC3oeSqjw8+hwBjmZ
- TLSH T19597338C73A41C9AE5F5D237A0D7D91A5B54B1122BE1CCCF87B819121CE72E9BD7AE00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.