General
- Target 2026-08-10_255429cef7f99efaf440dc7927c81102_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 3.0MB
- Sample260810-t15nnadj7y
- SHA256 6905b9cea0f163430a8acb7595a1280cf1034865ee95851fa1cbdcd75ef25680
- MD5 255429cef7f99efaf440dc7927c81102
- SHA1 8e5984b7b86dd9742bc5f851b7368fd420dab4d1
- SHA512 9ffbe3fd71435237a9d9310489aafab3c488938c13c3a444d084353d47994b29c57bd38582839ab13af9dc8846ba8465036a1c8545eaf90552e8991611e5a0ad
- SSDEEP 49152:Lw1masr8/ywWYsp8L8rR9H34rU8r4UVjnZ+DHW5oYurM4j:L8Nsp/rRd34rU8rFjZ+bOGtj
- TLSH T1F5E52318A79614F6F9F7913DC9A3C295D6723C961370D6CF43A08A263F332E129397A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_255429cef7f99efaf440dc7927c81102_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_255429cef7f99efaf440dc7927c81102_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_255429cef7f99efaf440dc7927c81102_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 3.0MB
- SHA256 6905b9cea0f163430a8acb7595a1280cf1034865ee95851fa1cbdcd75ef25680
- MD5 255429cef7f99efaf440dc7927c81102
- SHA1 8e5984b7b86dd9742bc5f851b7368fd420dab4d1
- SHA512 9ffbe3fd71435237a9d9310489aafab3c488938c13c3a444d084353d47994b29c57bd38582839ab13af9dc8846ba8465036a1c8545eaf90552e8991611e5a0ad
- SSDEEP 49152:Lw1masr8/ywWYsp8L8rR9H34rU8r4UVjnZ+DHW5oYurM4j:L8Nsp/rRd34rU8rFjZ+bOGtj
- TLSH T1F5E52318A79614F6F9F7913DC9A3C295D6723C961370D6CF43A08A263F332E129397A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext