General
- Target 2026-08-07_6003f933f96e9d24f9aff210504536ac_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 45.4MB
- Sample260807-efse9sfm71
- SHA256 0de0974cd0950c2b3b76d052f7af6b5d0d8d3c5927df950d059cc28b7bb10412
- MD5 6003f933f96e9d24f9aff210504536ac
- SHA1 5d697d2ea91b0e04307d1831d15af16b430bcdcb
- SHA512 38f792fe66e63008a3cfd84324a39a8a779df1212698f62dca7f79f99138c68dde29a35a573d598ff53e7a87c4af42b68262463dade5eacd2b4495ccbfc20e20
- SSDEEP 786432:x4+gX4BMdhwzTQXR5FbPp6FcSS5U/LT2KzVyPVLBdSfa7KZKCH9qJQE4xw3e3she:x+XGMK4XR3bLSCU/+6yPl3oa7KZKCH9q
- TLSH T184A73320E5AD04D6FDFA293CE2639546D61CB8DA9F72C1E700A001438C67DE9677B7B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_6003f933f96e9d24f9aff210504536ac_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_6003f933f96e9d24f9aff210504536ac_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_6003f933f96e9d24f9aff210504536ac_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 45.4MB
- SHA256 0de0974cd0950c2b3b76d052f7af6b5d0d8d3c5927df950d059cc28b7bb10412
- MD5 6003f933f96e9d24f9aff210504536ac
- SHA1 5d697d2ea91b0e04307d1831d15af16b430bcdcb
- SHA512 38f792fe66e63008a3cfd84324a39a8a779df1212698f62dca7f79f99138c68dde29a35a573d598ff53e7a87c4af42b68262463dade5eacd2b4495ccbfc20e20
- SSDEEP 786432:x4+gX4BMdhwzTQXR5FbPp6FcSS5U/LT2KzVyPVLBdSfa7KZKCH9qJQE4xw3e3she:x+XGMK4XR3bLSCU/+6yPl3oa7KZKCH9q
- TLSH T184A73320E5AD04D6FDFA293CE2639546D61CB8DA9F72C1E700A001438C67DE9677B7B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Detects executables containing URLs to raw contents of a Github gist
-
Loads dropped DLL
-
Suspicious use of SetThreadContext