General
- Target 2026-08-16_6113d75eda2bc243fd60ecd1dd319568_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 9.3MB
- Sample260816-rmrtjacp7y
- SHA256 bc400fdffda4eb194345dc309b2947cbc24051c3dd1fef5d86501efe50d7fb77
- MD5 6113d75eda2bc243fd60ecd1dd319568
- SHA1 ddbce53b52f8172c7b7905e9cb707be3e52aaa02
- SHA512 a0564b9aa56ff3e997f1a01fc49e84ea2f6963e3b8801c402fa382a2afb638fdf8144dba6470fe913f4e6a05295e5fea1a5cd7ee81aaafbe18df1139ed99c9e8
- SSDEEP 196608:na85DbJrte1v8ZNqnAF1dadQmR8dA6luA8Qnf2ODjMnGydSVlTl5uSPbOwID3ZnH:a85vz+qNqnW4dQJluIF3MnG3Vdl5lPbK
- TLSH T135A63346B7891CE6E4A79139C4939589DB72F9650770C7E3439416AB0E1B3E02E3FEA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-16_6113d75eda2bc243fd60ecd1dd319568_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_6113d75eda2bc243fd60ecd1dd319568_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 9.3MB
- SHA256 bc400fdffda4eb194345dc309b2947cbc24051c3dd1fef5d86501efe50d7fb77
- MD5 6113d75eda2bc243fd60ecd1dd319568
- SHA1 ddbce53b52f8172c7b7905e9cb707be3e52aaa02
- SHA512 a0564b9aa56ff3e997f1a01fc49e84ea2f6963e3b8801c402fa382a2afb638fdf8144dba6470fe913f4e6a05295e5fea1a5cd7ee81aaafbe18df1139ed99c9e8
- SSDEEP 196608:na85DbJrte1v8ZNqnAF1dadQmR8dA6luA8Qnf2ODjMnGydSVlTl5uSPbOwID3ZnH:a85vz+qNqnW4dQJluIF3MnG3Vdl5lPbK
- TLSH T135A63346B7891CE6E4A79139C4939589DB72F9650770C7E3439416AB0E1B3E02E3FEA0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.