General
- Target 2026-08-05_c313f8b884e50861c98e6406190f9cd6_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 14.0MB
- Sample260805-2awxtsszds
- SHA256 f0784c7bd1cb59ad75cb1e86bf0559ed33d25128e712ec3746e26bc82da20c29
- MD5 c313f8b884e50861c98e6406190f9cd6
- SHA1 f214391a24f557a7b3e5375c3bab0268dd73cbbb
- SHA512 4e3b5920749ee6e6814fe131a6edb75275231555f73a84de0825aa985a224ba33ccf54289442f680dde4c9b4e566dee01ff2d3974cda8852a352749a54ed4e41
- SSDEEP 393216:k1pEd1+TtIiF4Y9Z8D8Cclt7Yx4rp83E24bpFfMdtEg:kEd1QtIha8DZcfm4SAnfMn
- TLSH T1F4E6339AF7A206EAD5FA31398293C451ABB278D34731C6CF1BAC51312F176E24936731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_c313f8b884e50861c98e6406190f9cd6_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_c313f8b884e50861c98e6406190f9cd6_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_c313f8b884e50861c98e6406190f9cd6_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 14.0MB
- SHA256 f0784c7bd1cb59ad75cb1e86bf0559ed33d25128e712ec3746e26bc82da20c29
- MD5 c313f8b884e50861c98e6406190f9cd6
- SHA1 f214391a24f557a7b3e5375c3bab0268dd73cbbb
- SHA512 4e3b5920749ee6e6814fe131a6edb75275231555f73a84de0825aa985a224ba33ccf54289442f680dde4c9b4e566dee01ff2d3974cda8852a352749a54ed4e41
- SSDEEP 393216:k1pEd1+TtIiF4Y9Z8D8Cclt7Yx4rp83E24bpFfMdtEg:kEd1QtIha8DZcfm4SAnfMn
- TLSH T1F4E6339AF7A206EAD5FA31398293C451ABB278D34731C6CF1BAC51312F176E24936731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Loads dropped DLL
-
Suspicious use of SetThreadContext