3dc28b70825ba7a60646e17d78c04493c731bddd665a2136c06c32e551b45fcb

Resubmissions

14/08/2026, 13:38

260814-qxtkfavyev3

14/08/2026, 13:28

260814-qq4rtscm4y10

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-14_6b23eefd5605c0dd0740693b650a9986_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
Size 75.5MB
Sample260814-qxtkfavyev
SHA256 3dc28b70825ba7a60646e17d78c04493c731bddd665a2136c06c32e551b45fcb
MD5 6b23eefd5605c0dd0740693b650a9986
SHA1 8d36017cafeeda590ffee68bd853d651975a8bef
SHA512 ee9c251f9738f41971fe6fd5009ebec3ec8a18564ad7d910f5763025639b7e15435e2a985d6d1edb82146b85796ec035953034a3ba5f5e47d05afb2dccdc4007
SSDEEP 1572864:4v9zWpEBuHKO+dy2J0f0/rBdsG7bpip0WWPnGCnk9+BDOyW/1FNcpwoy:a9ixHI5BB7tE0WoGCnk95N0
TLSH
T110083328485566E7F6020A32D8E3A466BBBF68068F53C09E1BD54D13AB37285DC7CC77
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  main.pyc
- Size 137KB
- SHA256 658a2714bbb0d21b8c5e9142c0a4cc2a49ba0eb6ba765782eed3fd3b9b5fe609
- MD5 952ced2a3e9a2bc5449f150c254c2fae
- SHA1 1182966b046875de25fbd73711eef2549173108c
- SHA512 037b7fb106b7f961b650e33d36df19bc4bcb13ce124f7fc919cdecc13277fe42051eac56716371910f674b98cec1ebf81a5ff604cc335d88e8c7a03ab4e8d3aa
- SSDEEP 1536:5AmSXahzrpTVbzrskTtmO+rdNTrwd3gDVv50anCuwhlzsUl3uAQooF5vNVB7/:5A2h3nm9ZFrwxOVv5xtw0R1fFpNVB7/
- TLSH
  T152D3C6D2A474895EEF10B17484E94494E76D7AC3B210CB23250F42767EDBAAACEDD34C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks