General
- Target 2026-08-08_09a58c246c70d05723b2250a7e67ece1_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 13.8MB
- Sample260808-h8abyaseph
- SHA256 53868f7249fa101d3df5dc83904c42fe387b6c77faf4da58fa80e921cd861951
- MD5 09a58c246c70d05723b2250a7e67ece1
- SHA1 db29e68141d397414a577d9bb88ca9621f6907e1
- SHA512 2128f73c694ca322631c29f2bf11ab304ce8eac7ec461073cd797b234bd1564f4fa28b34716a7ee79f482900f9acc83709713ab4964b35236bf03b329e0718a4
- SSDEEP 393216:xrh0bnXEAphVtr510Mj0B36IOtGjp9v/r5uDNc:x90rRphR10MK3HO4jzv/r5uR
- TLSH T128E6336CB69011FBF5E5813E49A6D872F3F235121B5293DB03E046623E3B9B05E3D6A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-08_09a58c246c70d05723b2250a7e67ece1_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_09a58c246c70d05723b2250a7e67ece1_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 13.8MB
- SHA256 53868f7249fa101d3df5dc83904c42fe387b6c77faf4da58fa80e921cd861951
- MD5 09a58c246c70d05723b2250a7e67ece1
- SHA1 db29e68141d397414a577d9bb88ca9621f6907e1
- SHA512 2128f73c694ca322631c29f2bf11ab304ce8eac7ec461073cd797b234bd1564f4fa28b34716a7ee79f482900f9acc83709713ab4964b35236bf03b329e0718a4
- SSDEEP 393216:xrh0bnXEAphVtr510Mj0B36IOtGjp9v/r5uDNc:x90rRphR10MK3HO4jzv/r5uR
- TLSH T128E6336CB69011FBF5E5813E49A6D872F3F235121B5293DB03E046623E3B9B05E3D6A1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.