General
- Target 2026-08-09_c0717f1595422af2e8b6ccea6da4136a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 17.2MB
- Sample260809-a18wjafm8z
- SHA256 fa2a2ba40540f39f4de763848b12ce6871149fe2bdbd4bc3a3cc0df14c4444cd
- MD5 c0717f1595422af2e8b6ccea6da4136a
- SHA1 d026b3b006f2f04fb11d0e745b8b89926f3f1063
- SHA512 3edd4b4cc147341cbb517c25cbb6e4015d06ec47eef2d65ad1aa0e39902ace6f9327bdc735f1dd2785d925c5f664e2ce93603655e21c586fc066706142b8e786
- SSDEEP 393216:WZqm0LRFgIfUKOcFXEAphVtnIwQSg+SlatEovF7dZplV:iqzlF58KPFRphDBo+SstzvF7l
- TLSH T1AC0733A8FB814D7AF4F7413C15A48D11E1B272A42F95E2FF07B14A162E3B7D04E785A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-09_c0717f1595422af2e8b6ccea6da4136a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_c0717f1595422af2e8b6ccea6da4136a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_c0717f1595422af2e8b6ccea6da4136a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 17.2MB
- SHA256 fa2a2ba40540f39f4de763848b12ce6871149fe2bdbd4bc3a3cc0df14c4444cd
- MD5 c0717f1595422af2e8b6ccea6da4136a
- SHA1 d026b3b006f2f04fb11d0e745b8b89926f3f1063
- SHA512 3edd4b4cc147341cbb517c25cbb6e4015d06ec47eef2d65ad1aa0e39902ace6f9327bdc735f1dd2785d925c5f664e2ce93603655e21c586fc066706142b8e786
- SSDEEP 393216:WZqm0LRFgIfUKOcFXEAphVtnIwQSg+SlatEovF7dZplV:iqzlF58KPFRphDBo+SstzvF7l
- TLSH T1AC0733A8FB814D7AF4F7413C15A48D11E1B272A42F95E2FF07B14A162E3B7D04E785A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.