General
- Target 2026-08-08_20e2b3f12ce62bd8e59edc5d385d8b6b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 12.6MB
- Sample260809-anfdfsxbpb
- SHA256 85a0205241edf211d53ea762d72c4a01a859865bc640eb35b29e13285dbdca3b
- MD5 20e2b3f12ce62bd8e59edc5d385d8b6b
- SHA1 dc804eb854b7486f8c008a1871f9af71695bbd26
- SHA512 520f6cda7a606b91e6b2a84398465a809211229a347c4645d95bdb6c12db080ee92c604242c7923d9a5dd5f28aabfab6365e62e3d92b8aca4ba6b75cbba3b91c
- SSDEEP 393216:+DMgIfUKOcR1idq1B7/zCQsHsoqybpin:L58KPR1ig1dzGnnbp
- TLSH T1E0D6335C93E109A2F4ABA23D46A64557C1B171145712CEEF07E0836A2E9B3F34E36BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_20e2b3f12ce62bd8e59edc5d385d8b6b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_20e2b3f12ce62bd8e59edc5d385d8b6b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_20e2b3f12ce62bd8e59edc5d385d8b6b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 12.6MB
- SHA256 85a0205241edf211d53ea762d72c4a01a859865bc640eb35b29e13285dbdca3b
- MD5 20e2b3f12ce62bd8e59edc5d385d8b6b
- SHA1 dc804eb854b7486f8c008a1871f9af71695bbd26
- SHA512 520f6cda7a606b91e6b2a84398465a809211229a347c4645d95bdb6c12db080ee92c604242c7923d9a5dd5f28aabfab6365e62e3d92b8aca4ba6b75cbba3b91c
- SSDEEP 393216:+DMgIfUKOcR1idq1B7/zCQsHsoqybpin:L58KPR1ig1dzGnnbp
- TLSH T1E0D6335C93E109A2F4ABA23D46A64557C1B171145712CEEF07E0836A2E9B3F34E36BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Drops file in Drivers directory
-
Loads dropped DLL
-
Suspicious use of SetThreadContext