Overview

overview

7

Static

static

3

2026-08-07...om.exe

windows10-2004-x64

7

2026-08-07...om.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    149s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/08/2026, 00:23

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-07_fa226e597606410bdf6cf0dcb6b32689_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
  • Size 13.7MB
  • Sample260808-apgmxawejc
  • SHA256 df6eb4d0225a05893b40a84491aa1b3b2b6932b3d22b5add6f2de7dd2f91c840
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
execution

Malware Config

Signatures

  • Loads dropped DLL 24 IoCs
  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-07_fa226e597606410bdf6cf0dcb6b32689_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-07_fa226e597606410bdf6cf0dcb6b32689_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1212
    • C:\Users\Admin\AppData\Local\Temp\2026-08-07_fa226e597606410bdf6cf0dcb6b32689_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-07_fa226e597606410bdf6cf0dcb6b32689_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:4760
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
        • Executes a command shell one-liner
        PID:6120

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        81d243bd2c585b0f4821__mypyc.cp311-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\81d243bd2c585b0f4821__mypyc.cp311-win_amd64.pyd
        • Size 211KB
        • SHA256 89b688b3848e196de02a444c72cfc25bb3efebaba84a28469ac1e7f5738e0564
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _raw_aes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\Crypto\Cipher\_raw_aes.pyd
        • Size 34KB
        • SHA256 520b343e44b5633bbc4fdcecc705a7f2eb6e55d082a1f3e4723ada9d7e5ea97d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _raw_aesni.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\Crypto\Cipher\_raw_aesni.pyd
        • Size 15KB
        • SHA256 3818873f50418cbecde58150e9bffff7372d2c2067fc0b96ffac9482dfddd603
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _cpuid_c.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\Crypto\Util\_cpuid_c.pyd
        • Size 10KB
        • SHA256 2af984819d9b1f95132520901b355eb85aa24d5efc6fc5ae9e77252ed03b7f4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\VCRUNTIME140.dll
        • Size 96KB
        • SHA256 d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\_bz2.pyd
        • Size 81KB
        • SHA256 5843872d5e2b08f138a71fe9ba94813afee59c8b48166d4a8eb0f606107a7e80
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\_ctypes.pyd
        • Size 120KB
        • SHA256 e662d2b35bb48c5f3432bde79c0d20313238af800968ba0faa6ea7e7e5ef4535
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _decimal.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\_decimal.pyd
        • Size 245KB
        • SHA256 d0df57988a74acd50b2d261e8b5f2c25da7b940ec2aafbee444c277552421e6e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\_hashlib.pyd
        • Size 62KB
        • SHA256 39bc615842a176db72d4e0558f3cdcae23ab0623ad132f815d21dcfbfd4b110e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\_lzma.pyd
        • Size 154KB
        • SHA256 613de58e4a9a80eff8f8bc45c350a6eaebf89f85ffd2d7e3b0b266bf0888a60a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _multiprocessing.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\_multiprocessing.pyd
        • Size 32KB
        • SHA256 0ae3bf383ff998886f97576c55d6bf0a076c24395cf6fcd2265316e9a6e8c007
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\_queue.pyd
        • Size 30KB
        • SHA256 2f71046891ba279b00b70eb031fe90b379dbe84559cf49ce5d1297ea6bf47a78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\_socket.pyd
        • Size 76KB
        • SHA256 39715ef8d043354f0ab15f62878530a38518fb6192bc48da6a098498e8d35769
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\_ssl.pyd
        • Size 155KB
        • SHA256 cb42e8598e3fa53eeebf63f2af1730b9ec64614bda276ab2cd1f1c196b3d7e32
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        auto.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\_tcl_data\auto.tcl
        • Size 21KB
        • SHA256 517204ee436d08efc287abc97433c3bffcaf42ec6592a3009b9fd3b985ad772c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cp1252.enc
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\_tcl_data\encoding\cp1252.enc
        • Size 1KB
        • SHA256 741859cf238c3a63bbb20ec6ed51e46451372bb221cfff438297d261d0561c2e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pkgIndex.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\_tcl_data\http1.0\pkgIndex.tcl
        • Size 746B
        • SHA256 77265723959c092897c2449c5b7768ca72d0efcd8c505bddbb7a84f6aa401339
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        init.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\_tcl_data\init.tcl
        • Size 25KB
        • SHA256 331bcf0f9f635bd57c3384f2237260d074708b0975c700cfcbdb285f5f59ab1f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        package.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\_tcl_data\package.tcl
        • Size 23KB
        • SHA256 f46ab61cdebe3aa45fa7e61a48930d64a0d0e7e94d04d6bf244f48c36cafe948
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tclIndex
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\_tcl_data\tclIndex
        • Size 5KB
        • SHA256 ddf7e42def37888ad0a564aa4f8ca95f4eec942cebebfca851d35515104d5c89
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tm.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\_tcl_data\tm.tcl
        • Size 11KB
        • SHA256 4b7ed9fd2363d6876092db3f720cbddf97e72b86b519403539ba96e1c815ed8f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pkgIndex.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\_tk_data\pkgIndex.tcl
        • Size 376B
        • SHA256 3f2539e85e2a9017913e61fe2600b499315e1a6f249a4ff90e0b530a1eeb8898
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        tk.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\_tk_data\tk.tcl
        • Size 23KB
        • SHA256 0f617d96cbf213296d7a5f7fcffbb4ae1149840d7d045211ef932e8dd66683e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _tkinter.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\_tkinter.pyd
        • Size 61KB
        • SHA256 6ff6cc788f1ab19de383810ddbd15ecd5fc8216faf5e1e406bbf9a608fbb9991
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _uuid.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\_uuid.pyd
        • Size 23KB
        • SHA256 f7f57807c15c21c5aa9818edf3993d0b94aef8af5808e1ad86a98637fc499d44
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\base_library.zip
        • Size 1.4MB
        • SHA256 1744f44bfe55ecf7151855a23a3c7796f4277b0632623ac2429baf98674fcbb0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cd.cp311-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\charset_normalizer\cd.cp311-win_amd64.pyd
        • Size 10KB
        • SHA256 45a9cb1664e2e26ea183d34652869a6a7183b0b2018e151da1e3c88213e8bc8c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        checker_guest.ico
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\checker_guest.ico
        • Size 60KB
        • SHA256 87d7428a4ccaef5d023cab8dc7e14bad601b7827b8bf7543801a7f5eab3a6c1c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        checker_guest.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\checker_guest.png
        • Size 801KB
        • SHA256 6b4b8d6220fac70934c36d7ed9a739c2a36a54d9d0ad5d5868c43c8f7dff7491
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        checker_guest_header.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\checker_guest_header.png
        • Size 1KB
        • SHA256 7c971da37204c711028779ec7409244fba8769e56ee31eac9a002e88abdbb8c9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        blue.json
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\customtkinter\assets\themes\blue.json
        • Size 4KB
        • SHA256 c9417470c16ced7a43d6c4a8e027afa6edc62c24d5aee7c4c2dcd11385964d3b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\libcrypto-1_1.dll
        • Size 3.3MB
        • SHA256 976ce72efd0a8aeeb6e21ad441aa9138434314ea07f777432205947cdb149541
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\libffi-8.dll
        • Size 34KB
        • SHA256 128a583e821e52b595eb4b3dda17697d3ca456ee72945f7ecce48ededad0e93c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\libssl-1_1.dll
        • Size 686KB
        • SHA256 2aebb73530d21a2273692a5a3d57235b770daf1c35f60c74e01754a5dac05071
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\pyexpat.pyd
        • Size 193KB
        • SHA256 d97f3e27130c267e7d3287d1b159f65559e84ead9090d02a01b4c7dc663cd509
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python311.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\python311.dll
        • Size 5.5MB
        • SHA256 a0cf640e756875c25c12b4a38ba5f2772e8e512036e2ac59eb8567bf05ffbfb7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\select.pyd
        • Size 28KB
        • SHA256 0046eb32f873cde62cf29af02687b1dd43154e9fd10e0aa3d8353d3debb38790
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tcl86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\tcl86t.dll
        • Size 1.8MB
        • SHA256 a91781fe13548b89817462b00058a75fb0b607ec8ce99d265719ced573ade7b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msgcat-1.6.1.tm
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\tcl8\8.5\msgcat-1.6.1.tm
        • Size 34KB
        • SHA256 6774519f179872ec5292523f2788b77b2b839e15665037e097a0d4edddd1c6fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tk86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\tk86t.dll
        • Size 1.5MB
        • SHA256 20139f4c327711baf18289584fa0c8112f7bb3ba55475bded21f3d107672ed94
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tkdnd.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\tkinterdnd2\tkdnd\win-arm64\tkdnd.tcl
        • Size 18KB
        • SHA256 08ea8444c0c54c7f70d90d9178fcf2add6995bb3a9f0566746041c3b8169bb8c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tkdnd_compat.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\tkinterdnd2\tkdnd\win-arm64\tkdnd_compat.tcl
        • Size 6KB
        • SHA256 58b0aebd287df1d2cfe16231847b786ac9a3a2d18fff2a8a37955510221d10f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tkdnd_generic.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\tkinterdnd2\tkdnd\win-arm64\tkdnd_generic.tcl
        • Size 23KB
        • SHA256 98cb2b68fdee38646c851e05585f3e6adeafc62c9c76b79367f17e3f475ec6f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tkdnd_unix.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\tkinterdnd2\tkdnd\win-arm64\tkdnd_unix.tcl
        • Size 34KB
        • SHA256 412cf6a6620e8c692875578cc570138cbeb6e1d90f80d1c4ae1f5035c1368150
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tkdnd_utils.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\tkinterdnd2\tkdnd\win-arm64\tkdnd_utils.tcl
        • Size 9KB
        • SHA256 fff7b046dfa50992dd3151c74291558c13a675efcaa758ce53d4d4a6ebebbb43
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tkdnd_windows.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\tkinterdnd2\tkdnd\win-arm64\tkdnd_windows.tcl
        • Size 7KB
        • SHA256 7b7b522a769fcb5d1484891685bc3c0ee4967899317caa0547ab0e8d1d6e808f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tkdnd_macosx.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\tkinterdnd2\tkdnd\win-x86\tkdnd_macosx.tcl
        • Size 6KB
        • SHA256 8df2832dd834cd5347f42ef62a9fd8c14b6b473e2a9f8007db6c31a606ca4ab9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12122\unicodedata.pyd
        • Size 1.1MB
        • SHA256 ecf7836aa0d36b5880eb6f799ec402b1f2e999f78bfff6fb9a942d1d8d0b9baa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download