General
- Target 2026-08-08_687eae73d6464cc7664c20fb6b1e3899_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 45.8MB
- Sample260808-fmnw4a1arg
- SHA256 73ee2cf1cc17225ecc6ab7c1ed3b5c94cd829b0142eb2a1976c17996c5dc56cf
- MD5 687eae73d6464cc7664c20fb6b1e3899
- SHA1 c430bd32d9c36ede78f58e0fffe8f092a8483d2a
- SHA512 1b64d47b95e3aa9080488f447e2c31b383651449766f1ba89c291934eb375136ca074e6fdab48e6a1141eee6d8cb38ec99d39ceba144cf1b38874c834230a7a5
- SSDEEP 786432:G+gX4BMdhwzTQXR5FbPp6FcSS5U/LT2KzVyPVLBdg3qHv8Eb4VdQedJn9R3MGquH:kXGMK4XR3bLSCU/+6yPl3g6EEb4VLMG5
- TLSH T11FB73381E6E908D4F8BF1834D451A686EF15B0EB47F1C7B651E0019705ABEE02F6BE6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_687eae73d6464cc7664c20fb6b1e3899_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_687eae73d6464cc7664c20fb6b1e3899_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_687eae73d6464cc7664c20fb6b1e3899_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 45.8MB
- SHA256 73ee2cf1cc17225ecc6ab7c1ed3b5c94cd829b0142eb2a1976c17996c5dc56cf
- MD5 687eae73d6464cc7664c20fb6b1e3899
- SHA1 c430bd32d9c36ede78f58e0fffe8f092a8483d2a
- SHA512 1b64d47b95e3aa9080488f447e2c31b383651449766f1ba89c291934eb375136ca074e6fdab48e6a1141eee6d8cb38ec99d39ceba144cf1b38874c834230a7a5
- SSDEEP 786432:G+gX4BMdhwzTQXR5FbPp6FcSS5U/LT2KzVyPVLBdg3qHv8Eb4VdQedJn9R3MGquH:kXGMK4XR3bLSCU/+6yPl3g6EEb4VLMG5
- TLSH T11FB73381E6E908D4F8BF1834D451A686EF15B0EB47F1C7B651E0019705ABEE02F6BE6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Loads dropped DLL
-
Suspicious use of SetThreadContext