General
- Target 2026-08-09_b1af6d3ae270e776ab850c0070f091d1_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 17.2MB
- Sample260809-a2mppaga96
- SHA256 482f9547a682313e61a9f1c6bdbb87ab9ea73c6486abd96a3e54d662b749f160
- MD5 b1af6d3ae270e776ab850c0070f091d1
- SHA1 1ac7c7cc09700fb1c2e2de8277c78590a02e2af4
- SHA512 e2798dec7861c95800aac253c6b3dd73074ac76d1220066b64f6198a6f31408775d8a86780d80ae292f2e3538e755348334f9caea50a4b00e572d4e0d0e66381
- SSDEEP 393216:vZqm0LRogIfUKOcFXEAphVtnIwQSg+SlatEovF7dZplV:hqzlo58KPFRphDBo+SstzvF7l
- TLSH T18B0733A8BBC14D76F4F3013C16A48951E1B2B2A42F95D6FF0BB10A162E7B3D04E7D5A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-09_b1af6d3ae270e776ab850c0070f091d1_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_b1af6d3ae270e776ab850c0070f091d1_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_b1af6d3ae270e776ab850c0070f091d1_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 17.2MB
- SHA256 482f9547a682313e61a9f1c6bdbb87ab9ea73c6486abd96a3e54d662b749f160
- MD5 b1af6d3ae270e776ab850c0070f091d1
- SHA1 1ac7c7cc09700fb1c2e2de8277c78590a02e2af4
- SHA512 e2798dec7861c95800aac253c6b3dd73074ac76d1220066b64f6198a6f31408775d8a86780d80ae292f2e3538e755348334f9caea50a4b00e572d4e0d0e66381
- SSDEEP 393216:vZqm0LRogIfUKOcFXEAphVtnIwQSg+SlatEovF7dZplV:hqzlo58KPFRphDBo+SstzvF7l
- TLSH T18B0733A8BBC14D76F4F3013C16A48951E1B2B2A42F95D6FF0BB10A162E7B3D04E7D5A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.