General
- Target 2026-08-08_5a08545af230dd2ce26ad86cf41166cb_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 19.8MB
- Sample260808-thc6pahq4z
- SHA256 cd7889d2353faecf0209a04e758e584ee2dc65d2d2d211d2e7be2f201e45f28d
- MD5 5a08545af230dd2ce26ad86cf41166cb
- SHA1 7c91621fa6dd07f006372ba6a987ee8d183bf787
- SHA512 bb5351f4ccb76ab5eaf9e327a34f6f38ede0fca56dd766b27759f013bfd5f8055a85e43ea9e12f6ebec7fff0725ef202e2a0830ea7fe4dd38bb73727df93f6c6
- SSDEEP 393216:vLL1F9nroEAmURLAzXEAphVtnIwQSg+6FoIykCOGtZmvF7m0CruClZ:TpvrodmUJAzRphDBo+WoIy+GtgvF77K
- TLSH T1842733E473840A96F59E123DA8C09A66B3E174412F95C7EF0BF50E61097B6D4EF78B80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-08_5a08545af230dd2ce26ad86cf41166cb_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_5a08545af230dd2ce26ad86cf41166cb_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_5a08545af230dd2ce26ad86cf41166cb_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 19.8MB
- SHA256 cd7889d2353faecf0209a04e758e584ee2dc65d2d2d211d2e7be2f201e45f28d
- MD5 5a08545af230dd2ce26ad86cf41166cb
- SHA1 7c91621fa6dd07f006372ba6a987ee8d183bf787
- SHA512 bb5351f4ccb76ab5eaf9e327a34f6f38ede0fca56dd766b27759f013bfd5f8055a85e43ea9e12f6ebec7fff0725ef202e2a0830ea7fe4dd38bb73727df93f6c6
- SSDEEP 393216:vLL1F9nroEAmURLAzXEAphVtnIwQSg+6FoIykCOGtZmvF7m0CruClZ:TpvrodmUJAzRphDBo+WoIy+GtgvF77K
- TLSH T1842733E473840A96F59E123DA8C09A66B3E174412F95C7EF0BF50E61097B6D4EF78B80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Loads dropped DLL
-
Adds Run key to start application