General
- Target 2026-08-09_29e838c79f12ee7856e5e25fa76099cf_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 13.7MB
- Sample260810-abml1axfrf
- SHA256 a9cb8be5669641a810ac31833abec9d1191ab6d3b908df314c807ac9a9cb1725
- MD5 29e838c79f12ee7856e5e25fa76099cf
- SHA1 262183d0480cdfc9cc64f13049d7c7d60a19b304
- SHA512 7a76b4accca576fb0e8174aa0ed7490d8beb424a307d11ecc444b2ef11f8fe9b0dd4c71e8f8041cde0682291dffaa5ce638d99f40323515a2a916699e31397e9
- SSDEEP 393216:cqmn7LMk9XEAphVtnIUQSg+MPm5/jtoHPvF7XZp:cqq4cRphDto+hLtovvF7
- TLSH T15EE633AC7BE115FAE8F3013C5960C465F2B2B2522B94E2FF0B75061A1E3F6D58D39294
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-09_29e838c79f12ee7856e5e25fa76099cf_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_29e838c79f12ee7856e5e25fa76099cf_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 13.7MB
- SHA256 a9cb8be5669641a810ac31833abec9d1191ab6d3b908df314c807ac9a9cb1725
- MD5 29e838c79f12ee7856e5e25fa76099cf
- SHA1 262183d0480cdfc9cc64f13049d7c7d60a19b304
- SHA512 7a76b4accca576fb0e8174aa0ed7490d8beb424a307d11ecc444b2ef11f8fe9b0dd4c71e8f8041cde0682291dffaa5ce638d99f40323515a2a916699e31397e9
- SSDEEP 393216:cqmn7LMk9XEAphVtnIUQSg+MPm5/jtoHPvF7XZp:cqq4cRphDto+hLtovvF7
- TLSH T15EE633AC7BE115FAE8F3013C5960C465F2B2B2522B94E2FF0B75061A1E3F6D58D39294
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.