General
- Target 2026-08-12_b6d0893a902fd9aa7eece827822dc89c_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 72.0MB
- Sample260812-jc985ayvax
- SHA256 10dfd4a7893c0fd8f23e04e21978a90781f863cfc55e615da05a1a447f7f300e
- MD5 b6d0893a902fd9aa7eece827822dc89c
- SHA1 ae020a5089b332d039d123e1d8a6da34f3d0269b
- SHA512 2b15a9530b45890c88103d2b73a36e736b565e1a06d619a6ec4fc19c9c41f4afd5cc1c9737942b57b7b51d3ab0273a30ffb8d0563ecb67046d3fdf4f95457573
- SSDEEP 1572864:Mp8EWi0izXUb9jETHPQmMpnx9luHY7otnq/2XnGCnkOoeSqj8NUpg55e9KX:M6EWXjcvPOn36xGCnk7eSqj8N754I
- TLSH T118F733847B801CD6FE9403364516FE58EAACF909279A880FA3F872253D5F3DE697D904
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
okul için rat.pyc
Resource
win10v2004-20260513-en
18 signatures
600 seconds
Behavioral task
behavioral2
Sample
okul için rat.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
600 seconds
Malware Config
Targets
-
- Target okul için rat.pyc
- Size 69KB
- SHA256 ad965f4026d0e36e11b5ab0cd3c8cdffd0cf5efe56739bf26d2b685f726dff9a
- MD5 8fd62718de797d5049fa0927653d51ad
- SHA1 4547d7c5b7bd00aeb8cd5cddd99eaec716af4b13
- SHA512 0e5a3cfa38371db8ea4f207c8fd220da8f91dec9142ddf35591577e9482fe7e6755276bc170226d394b59df4901315fdb1853020713b6fb10022bf9cd922dea1
- SSDEEP 1536:CqpQ0QAdXM8gJZ1J7qbwpE1qb+btxzZGdDRsdtvd1WL:EvaXMFJZ1Aw16zZGbsdtvdM
- TLSH T13B63F74BA9749013FF64F17480EA4864B36D7DC37251C326310E52B9AEEBB6ADE9030D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.