General
- Target 2026-08-06_49523a7d4f33cf21fe196c207b087f1b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 4.9MB
- Sample260806-vwegcazyev
- SHA256 d8bf25a9d985db3ef61892741e40e9e219f5abdf4f0ce551311eb009a02b0210
- MD5 49523a7d4f33cf21fe196c207b087f1b
- SHA1 0f805d82937011df6d087b1e4d16ef0e4fa42091
- SHA512 0475439e7b561b41d32831875355ffa855811fbe0a2f627eab9cbca31c70a3f7d0ad403fa290a8945fbb84c2c6f23291812be21cbaf9080d28707c5a51124048
- SSDEEP 98304:yuxa9RFkBEWwMR6Hrky7oRQSrJDj2Ai/5gU5tD9IEfJxzGPJ3NPxTRitS9:yuRBEWV2r4QqyBPD3hxyJ3NtRig
- TLSH T146363389E76205FAE9E6203E8153C015A6B27CD39731CADF1BA881672F275D21C3B771
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_49523a7d4f33cf21fe196c207b087f1b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_49523a7d4f33cf21fe196c207b087f1b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_49523a7d4f33cf21fe196c207b087f1b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 4.9MB
- SHA256 d8bf25a9d985db3ef61892741e40e9e219f5abdf4f0ce551311eb009a02b0210
- MD5 49523a7d4f33cf21fe196c207b087f1b
- SHA1 0f805d82937011df6d087b1e4d16ef0e4fa42091
- SHA512 0475439e7b561b41d32831875355ffa855811fbe0a2f627eab9cbca31c70a3f7d0ad403fa290a8945fbb84c2c6f23291812be21cbaf9080d28707c5a51124048
- SSDEEP 98304:yuxa9RFkBEWwMR6Hrky7oRQSrJDj2Ai/5gU5tD9IEfJxzGPJ3NPxTRitS9:yuRBEWV2r4QqyBPD3hxyJ3NtRig
- TLSH T146363389E76205FAE9E6203E8153C015A6B27CD39731CADF1BA881672F275D21C3B771
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext