General
- Target 2026-08-16_6215e2727c8f6ccb4c50ba8ed19e7a75_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 7.5MB
- Sample260816-cpevesytgs
- SHA256 2f9b7c79c4b06fa41ab0d47581190e9930fd0a8b17189916e2aec1eb6f1028ac
- MD5 6215e2727c8f6ccb4c50ba8ed19e7a75
- SHA1 d19905c5b24cd0f3511b9b7209e75dc1aae41255
- SHA512 91a58d2a8598133982ce61239a121d8f97db4fef5f40cc1c1c0bb7e4c19fffe40b0749b9072ec4b89835be71a2a3487b3eb9037181447b18398217a1f51105b1
- SSDEEP 196608:IPL8CU0MhKr3uO1Z3JXLta48RmU/ITviZlsPvLkduMR:IPslor+O1xptatNITaZWQduMR
- TLSH T13F7633DAFBA500B8E827523CD8E19937DAB37872476885D78BE81A601DA31D5FF70314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-16_6215e2727c8f6ccb4c50ba8ed19e7a75_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_6215e2727c8f6ccb4c50ba8ed19e7a75_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_6215e2727c8f6ccb4c50ba8ed19e7a75_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 7.5MB
- SHA256 2f9b7c79c4b06fa41ab0d47581190e9930fd0a8b17189916e2aec1eb6f1028ac
- MD5 6215e2727c8f6ccb4c50ba8ed19e7a75
- SHA1 d19905c5b24cd0f3511b9b7209e75dc1aae41255
- SHA512 91a58d2a8598133982ce61239a121d8f97db4fef5f40cc1c1c0bb7e4c19fffe40b0749b9072ec4b89835be71a2a3487b3eb9037181447b18398217a1f51105b1
- SSDEEP 196608:IPL8CU0MhKr3uO1Z3JXLta48RmU/ITviZlsPvLkduMR:IPslor+O1xptatNITaZWQduMR
- TLSH T13F7633DAFBA500B8E827523CD8E19937DAB37872476885D78BE81A601DA31D5FF70314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application