General
- Target 2026-08-07_08aee4a6b8788c28f1eb9cc87dbb9813_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 7.1MB
- Sample260807-t3ev1ssvbw
- SHA256 c177a39fcdea24804667aadf7758b13b948eb3689b8fe8da2d961b1717123014
- MD5 08aee4a6b8788c28f1eb9cc87dbb9813
- SHA1 a3b8f65d47b4a01adb30802aa2e66178c7cf96db
- SHA512 f64026a560740d70d6d5f3696e0ee277d340a0a139e47c1f3c6613fa93c4718fb0f31202e41b3c456fe605c56715d2821217661b7943840f6f8d948d28e8a41c
- SSDEEP 196608:sACBUGiomownGCxdGjP5Ui2bjKVPy2wESjEQOwuCFpAX:/CBU7JnGCnGjKi2bjRoSjEbwBAX
- TLSH T142763394A5D200E6E9934139CCE3E2B6D674BC321721C9DF13E19A563F236F6683D7A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-07_08aee4a6b8788c28f1eb9cc87dbb9813_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_08aee4a6b8788c28f1eb9cc87dbb9813_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_08aee4a6b8788c28f1eb9cc87dbb9813_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 7.1MB
- SHA256 c177a39fcdea24804667aadf7758b13b948eb3689b8fe8da2d961b1717123014
- MD5 08aee4a6b8788c28f1eb9cc87dbb9813
- SHA1 a3b8f65d47b4a01adb30802aa2e66178c7cf96db
- SHA512 f64026a560740d70d6d5f3696e0ee277d340a0a139e47c1f3c6613fa93c4718fb0f31202e41b3c456fe605c56715d2821217661b7943840f6f8d948d28e8a41c
- SSDEEP 196608:sACBUGiomownGCxdGjP5Ui2bjKVPy2wESjEQOwuCFpAX:/CBU7JnGCnGjKi2bjRoSjEbwBAX
- TLSH T142763394A5D200E6E9934139CCE3E2B6D674BC321721C9DF13E19A563F236F6683D7A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Stops running service(s)
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.