General
- Target 2026-08-07_ab124e9201815398eb4bf3b77b0b432c_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 1.9MB
- Sample260808-a66claztax
- SHA256 2c2617bad7ad5eddc5a225a86b104506d7403459a91a98eeb7b8ca0320f902d9
- MD5 ab124e9201815398eb4bf3b77b0b432c
- SHA1 d4a5e6515c74207b45140ac9ad6d2a1591677e01
- SHA512 975082a48b4443c9770be8dc46c6aa9a00844c011cd529c68e88b20d7603209ee1c3c8181733c4a62043a860456b7f7c1e124089443c5ed623387ea61f01cde3
- SSDEEP 49152:Qxf4cvBLF8aLO1L4E3hnxL7s6H3304fuNqhmNtBkz59tqaWSV3vHX:k4cvRF8aLO1L4E3hp33OJNtBkz59tqaj
- TLSH T181958C1A67B801F9D2BBC178C6574607E7B2B45513209BDF17A08AAA3F13BE15B3E740
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-07_ab124e9201815398eb4bf3b77b0b432c_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-08-07_ab124e9201815398eb4bf3b77b0b432c_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 2026-08-07_ab124e9201815398eb4bf3b77b0b432c_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 1.9MB
- SHA256 2c2617bad7ad5eddc5a225a86b104506d7403459a91a98eeb7b8ca0320f902d9
- MD5 ab124e9201815398eb4bf3b77b0b432c
- SHA1 d4a5e6515c74207b45140ac9ad6d2a1591677e01
- SHA512 975082a48b4443c9770be8dc46c6aa9a00844c011cd529c68e88b20d7603209ee1c3c8181733c4a62043a860456b7f7c1e124089443c5ed623387ea61f01cde3
- SSDEEP 49152:Qxf4cvBLF8aLO1L4E3hnxL7s6H3304fuNqhmNtBkz59tqaWSV3vHX:k4cvRF8aLO1L4E3hp33OJNtBkz59tqaj
- TLSH T181958C1A67B801F9D2BBC178C6574607E7B2B45513209BDF17A08AAA3F13BE15B3E740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Server Software Component: Terminal Services DLL
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Server Software Component
1Terminal Services DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1