General
- Target 2026-08-11_6cfe58614716edc4beed7676ef2a5375_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 33.8MB
- Sample260811-dj4r2acb44
- SHA256 07b5cd73df7661dd4cd233ae3fbad042ea880fd6ac700817442a9cd13526e219
- MD5 6cfe58614716edc4beed7676ef2a5375
- SHA1 c8ee687cba4226a04b880450360548445c160999
- SHA512 665a941181b5b8acfb7388e01057d63a60b48d1989ed5cec0fd176d02a398f3b4673c506e6c7b645b7683a3aebf9241c6461d6fec5393807a6cd7948e5447674
- SSDEEP 786432:D21nbhVEHCYFqn1JoYL2yXMb8bJ92PBD+gEwLKbuMf1J5xHEl9axKyR3U:y1VP2ycQ9+BDO0muqSf
- TLSH T14D77335452B04477E8F205308B67C844FB67B4EE5BA5C8E78A941BB71D3B1D0AA3C2F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-11_6cfe58614716edc4beed7676ef2a5375_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_6cfe58614716edc4beed7676ef2a5375_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_6cfe58614716edc4beed7676ef2a5375_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 33.8MB
- SHA256 07b5cd73df7661dd4cd233ae3fbad042ea880fd6ac700817442a9cd13526e219
- MD5 6cfe58614716edc4beed7676ef2a5375
- SHA1 c8ee687cba4226a04b880450360548445c160999
- SHA512 665a941181b5b8acfb7388e01057d63a60b48d1989ed5cec0fd176d02a398f3b4673c506e6c7b645b7683a3aebf9241c6461d6fec5393807a6cd7948e5447674
- SSDEEP 786432:D21nbhVEHCYFqn1JoYL2yXMb8bJ92PBD+gEwLKbuMf1J5xHEl9axKyR3U:y1VP2ycQ9+BDO0muqSf
- TLSH T14D77335452B04477E8F205308B67C844FB67B4EE5BA5C8E78A941BB71D3B1D0AA3C2F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application