General
- Target 2026-08-08_420eb3fafca43b08161bd16ce5df91bc_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 82.2MB
- Sample260808-xmpl3afb47
- SHA256 ffbd4e6286083e255d299c1a917518c008b34c5ebc2f8ae107a161a733f882b1
- MD5 420eb3fafca43b08161bd16ce5df91bc
- SHA1 c26d2adb6c996eb23cab437715031451b530db6a
- SHA512 784a30972ad2b8d54e3d4bb4b1179623d78bddd7265bec57ec7071148c4e3ce1cb270f444b4395ee609356e23f2ccadc9067c483422e3fd5d7583ebb6847cbaf
- SSDEEP 1572864:sqq4f/aKdQYEUZl7XNyjhQR5QMJJ8R/E0/utd0xygPh+0oZKlLVlCNodylW+P:3ffFEQlLgaR55oR/E0/kd0xF8uzoZ
- TLSH T15C1833C8AE836D7BEAE6463045511C29E4DA31EC5FAB81AF17E0A5333F273406A354F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-08_420eb3fafca43b08161bd16ce5df91bc_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_420eb3fafca43b08161bd16ce5df91bc_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_420eb3fafca43b08161bd16ce5df91bc_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 82.2MB
- SHA256 ffbd4e6286083e255d299c1a917518c008b34c5ebc2f8ae107a161a733f882b1
- MD5 420eb3fafca43b08161bd16ce5df91bc
- SHA1 c26d2adb6c996eb23cab437715031451b530db6a
- SHA512 784a30972ad2b8d54e3d4bb4b1179623d78bddd7265bec57ec7071148c4e3ce1cb270f444b4395ee609356e23f2ccadc9067c483422e3fd5d7583ebb6847cbaf
- SSDEEP 1572864:sqq4f/aKdQYEUZl7XNyjhQR5QMJJ8R/E0/utd0xygPh+0oZKlLVlCNodylW+P:3ffFEQlLgaR55oR/E0/kd0xF8uzoZ
- TLSH T15C1833C8AE836D7BEAE6463045511C29E4DA31EC5FAB81AF17E0A5333F273406A354F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.