General
- Target 2026-08-09_977bc3deaf80d8a5b0fa35d6daad9219_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 18.5MB
- Sample260809-yd3b8scp5s
- SHA256 7c00fc42b66d9ce4e2e329ded90a0c2fc1797bc392d79af7d7fcdeedc57238e1
- MD5 977bc3deaf80d8a5b0fa35d6daad9219
- SHA1 dc2efcb8d913b8c83c047b350f74ad2bb4fe039d
- SHA512 51d5c913c38c9aa60be4fbb908f4997a5b88dc697683e6bf98db86b196981aee59433dc8f995644201851fc9fc8e2714d778505f1ad8209844001e89ddd82886
- SSDEEP 393216:mlBU7SW8cCK2S4v4JuxNZBVwnGCnGjei2bjRo0Lwq79PN7zpc7DZeDyWHXq:2YSW8cCnSkRrBVwnGCnkei2nRlVJPNHV
- TLSH T13F173398BAC209D2E9DB563694E5D1B5A3E4BEA20BB0D5CF06B508710D331E4FC39B35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-09_977bc3deaf80d8a5b0fa35d6daad9219_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_977bc3deaf80d8a5b0fa35d6daad9219_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260710-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_977bc3deaf80d8a5b0fa35d6daad9219_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 18.5MB
- SHA256 7c00fc42b66d9ce4e2e329ded90a0c2fc1797bc392d79af7d7fcdeedc57238e1
- MD5 977bc3deaf80d8a5b0fa35d6daad9219
- SHA1 dc2efcb8d913b8c83c047b350f74ad2bb4fe039d
- SHA512 51d5c913c38c9aa60be4fbb908f4997a5b88dc697683e6bf98db86b196981aee59433dc8f995644201851fc9fc8e2714d778505f1ad8209844001e89ddd82886
- SSDEEP 393216:mlBU7SW8cCK2S4v4JuxNZBVwnGCnGjei2bjRo0Lwq79PN7zpc7DZeDyWHXq:2YSW8cCnSkRrBVwnGCnkei2nRlVJPNHV
- TLSH T13F173398BAC209D2E9DB563694E5D1B5A3E4BEA20BB0D5CF06B508710D331E4FC39B35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.