General
- Target 2026-08-14_8c38509eb06bc00630a2338cff0f7a8b_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 104.1MB
- Sample260814-qgkmlack3s
- SHA256 9a54b384c8db490a09d567c5d55e298ad6bcbdd3b60676e4a8e03a42def611b7
- MD5 8c38509eb06bc00630a2338cff0f7a8b
- SHA1 0eb1d303f2f33394e954f6916e4ab6a941e2a654
- SHA512 26a7e9fd88cb1fc4bcbda4d3154baffbf4ab88fe7549ade23f626c7bdec76731c3d9408a9aa43afcfc4eb211f1eb566ba33093b27b1a722b79760286cd0eb29e
- SSDEEP 3145728:l9lVgYRPSC++6y9seAAVd1AY5bADDxgds8kGeSqj8C+d:l9/xaC4y9seAAV75bAHCBLlhC
- TLSH T116383358F75828CAE5A857369163CA0ADA88F00E875BC58761F010661C779CEE3FFF52
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
main.pyc
Resource
win10v2004-20260513-en
18 signatures
900 seconds
Behavioral task
behavioral2
Sample
main.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
900 seconds
Malware Config
Targets
-
- Target main.pyc
- Size 87KB
- SHA256 884888ac30578e4bc6a4b7bad4258a7171020de78830711a25f07e3aa324c04e
- MD5 01938191ec47a7580f481fcd43938130
- SHA1 c215ed833fa9e9f43a01f3831700cfd2ed267012
- SHA512 64f27d4fb83ced9205863a20a2ca9e73f277bdfdba11cc7f1fcaad4723b10ca270a6a04db1fef0e6a21b563151c3007881dc53268ed1ea9ace6172a4f899f574
- SSDEEP 1536:YiVKz/qMtMe31DZd2OSEiojA6VE0dHisaYCA69QNBXuw4bbwXrQ3xm0B7HzIB6+O:YiVqqM6cIOKalZFQEnRleSu
- TLSH T1BA93B45668619516FF50F03AC4CC8990A33DBEC6B321D323261F96742DEBBFACA51309
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.