Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/08/2026, 01:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
- Size 12.2MB
- Sample260810-ca9q9ayfmg
- SHA256 bd7590f778b90bef2c6897aa58a07995185cd02c9f8242c8a243030b700e26f6
- MD5 d294a8cfca48fe9e9a6081c9a60f6fd8
- SHA1 1f4e3d0c55696d3c9f51565510af35b06c5ab5fa
- SHA512 863db5ae32f303bba686002353fe17ce516ed7e9b8545ed8dc486fd2ad3e459b93c6685a7aac2bb8e577ffd1ccb809d1f4ba263194b29a65655e547f993c4bea
- SSDEEP 196608:W1yZ3IryvSDgH2BEBckw/9Lz/S8PFmBmhzA2ZpXGB:t3IryvSDgH2BrLz/3mBmhzA2ZpXGB
- TLSH T19BD6BE17B7958169D02BC17CC6A68B17E632B4550B31A3CF13844B2C6FA7BE42F3A791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4960 2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-10_d294a8cfca48fe9e9a6081c9a60f6fd8_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4960