General
- Target 2026-08-10_325d10d00885be4ee07b3112676193cb_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 20.6MB
- Sample260810-klp5zsfa62
- SHA256 1d74052fc922a05ffd4f88df73fca2c5548996a15c2b928d457732935fee4331
- MD5 325d10d00885be4ee07b3112676193cb
- SHA1 fdf23b43919bc27b447ed4924e3368f522490aa1
- SHA512 5c1ce97ac4a3451fd1b37963b58acb4fd6330e61154eb163e32b182de8d9f9c07fec4120e55df25cd6240dc620b87f965f7a0b6c82a7edb2c8310637feeb5e63
- SSDEEP 393216:vlNIZ37UJ32eivEoxy8e6hPdR/RCMXEAphVtnIUQSg+/OGOdrW+aIDcMvZfX6p3:vbS4ce2s7K7/rRphDto+WGOGID1vZf
- TLSH T15B27337CB6E52CFFF8F299394E69D966B27229011B62C0FB07D46E671E3B9801D34160
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-10_325d10d00885be4ee07b3112676193cb_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_325d10d00885be4ee07b3112676193cb_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_325d10d00885be4ee07b3112676193cb_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 20.6MB
- SHA256 1d74052fc922a05ffd4f88df73fca2c5548996a15c2b928d457732935fee4331
- MD5 325d10d00885be4ee07b3112676193cb
- SHA1 fdf23b43919bc27b447ed4924e3368f522490aa1
- SHA512 5c1ce97ac4a3451fd1b37963b58acb4fd6330e61154eb163e32b182de8d9f9c07fec4120e55df25cd6240dc620b87f965f7a0b6c82a7edb2c8310637feeb5e63
- SSDEEP 393216:vlNIZ37UJ32eivEoxy8e6hPdR/RCMXEAphVtnIUQSg+/OGOdrW+aIDcMvZfX6p3:vbS4ce2s7K7/rRphDto+WGOGID1vZf
- TLSH T15B27337CB6E52CFFF8F299394E69D966B27229011B62C0FB07D46E671E3B9801D34160
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Password Policy Discovery
Attempt to access detailed information about the password policy used within an enterprise network.