General
- Target 2026-08-09_04da3a0a69d8ce5fd43ad8790099152b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 20.8MB
- Sample260809-cp5e3sycrc
- SHA256 4f76b827ffaf7488f2b3f1b5dd905a7765aea82c29ceac1169d04fbd6144bbee
- MD5 04da3a0a69d8ce5fd43ad8790099152b
- SHA1 6797dcd798fa7501962ac1626f7da23ba882a83a
- SHA512 99a54000f759f810e9db15d913c9a92a2d7addb414ce7eb51bce13294772bb3c0a0deb0c1f5d126448a8d3f7e13d058c33fea4c1c13a2d9b1dae5189b225e908
- SSDEEP 393216:nlNIZ37UJ32eivEoxy8IbSFXFC10Udq1B7ZeXK9vXHskqSJLZpiLq:nbS4ce2snSfC10Ug13aw3oSNZpE
- TLSH T12B2733C53A6204B6EC8AA3356AD94EABC3B3B4204731C59F0FB09E791D5B1E8DE34751
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_04da3a0a69d8ce5fd43ad8790099152b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_04da3a0a69d8ce5fd43ad8790099152b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_04da3a0a69d8ce5fd43ad8790099152b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 20.8MB
- SHA256 4f76b827ffaf7488f2b3f1b5dd905a7765aea82c29ceac1169d04fbd6144bbee
- MD5 04da3a0a69d8ce5fd43ad8790099152b
- SHA1 6797dcd798fa7501962ac1626f7da23ba882a83a
- SHA512 99a54000f759f810e9db15d913c9a92a2d7addb414ce7eb51bce13294772bb3c0a0deb0c1f5d126448a8d3f7e13d058c33fea4c1c13a2d9b1dae5189b225e908
- SSDEEP 393216:nlNIZ37UJ32eivEoxy8IbSFXFC10Udq1B7ZeXK9vXHskqSJLZpiLq:nbS4ce2snSfC10Ug13aw3oSNZpE
- TLSH T12B2733C53A6204B6EC8AA3356AD94EABC3B3B4204731C59F0FB09E791D5B1E8DE34751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1