General
- Target 2026-08-17_18dcb18cddd92bcdf7a7b37c12d81396_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 24.0MB
- Sample260817-tr3spsek7x
- SHA256 6d4b33119747d65ee9f013124b48b01c436a976d25bbb02cf2fb25bb00ca6745
- MD5 18dcb18cddd92bcdf7a7b37c12d81396
- SHA1 ecc913274eae8a96680fb6c4fc936a957b8e4ccf
- SHA512 bd3f7e0801b4ee252479bc3693e371d4d4082a8711b9e6d600043217db16652146d07869fa63c454fbcf664ea3b3992bf09a3c7ab67f8379c51a3b15598bef23
- SSDEEP 393216:yUqzlNIZ37UJ32eivEoxy8eNI5IXEAphVtow510MjunpASBF2bEaImvdr5lvY:TqzbS4ce2s7NIKRphT10MEmDEabvdr5O
- TLSH T1A3473358BF1100F7E8F9423959E7DC52F3B2729B0BA1D2AB17A012362FAF5E05D38654
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_18dcb18cddd92bcdf7a7b37c12d81396_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_18dcb18cddd92bcdf7a7b37c12d81396_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_18dcb18cddd92bcdf7a7b37c12d81396_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 24.0MB
- SHA256 6d4b33119747d65ee9f013124b48b01c436a976d25bbb02cf2fb25bb00ca6745
- MD5 18dcb18cddd92bcdf7a7b37c12d81396
- SHA1 ecc913274eae8a96680fb6c4fc936a957b8e4ccf
- SHA512 bd3f7e0801b4ee252479bc3693e371d4d4082a8711b9e6d600043217db16652146d07869fa63c454fbcf664ea3b3992bf09a3c7ab67f8379c51a3b15598bef23
- SSDEEP 393216:yUqzlNIZ37UJ32eivEoxy8eNI5IXEAphVtow510MjunpASBF2bEaImvdr5lvY:TqzbS4ce2s7NIKRphT10MEmDEabvdr5O
- TLSH T1A3473358BF1100F7E8F9423959E7DC52F3B2729B0BA1D2AB17A012362FAF5E05D38654
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Loads dropped DLL
-
Suspicious use of SetThreadContext