General
- Target 2026-08-17_ae5ff94ce364d19b6672b559711babb3_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 36.6MB
- Sample260818-aaej1ascmb
- SHA256 73a80f04a7bdb79d6fde4a7c5e393c47cd9dc897173c11ec770f43270e0d32f5
- MD5 ae5ff94ce364d19b6672b559711babb3
- SHA1 fda81aeed6c812e0057b0dc38664bdabad1d2867
- SHA512 46d29268738be307d9ec5a3b813af69f7f765f977c1883b03deab76c4b7479a7ae1af0f2674580f92ed81098090d55ac8b3ff45b7f4141871c86fe7709cee322
- SSDEEP 786432:B8uhI/itK9E1qiTFITx0Y7N7otIQkaUesr8h+zhqG8J11T98Rphho+R4cvFg0:Cu0itKSqwFgj7OIVeNIzhqR98Phtc0
- TLSH T15E873394A6909EBCF4E71A3D66E1C86241B1B8C5077EF1C7DA244D140FB37EC9CB8929
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_ae5ff94ce364d19b6672b559711babb3_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_ae5ff94ce364d19b6672b559711babb3_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_ae5ff94ce364d19b6672b559711babb3_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 36.6MB
- SHA256 73a80f04a7bdb79d6fde4a7c5e393c47cd9dc897173c11ec770f43270e0d32f5
- MD5 ae5ff94ce364d19b6672b559711babb3
- SHA1 fda81aeed6c812e0057b0dc38664bdabad1d2867
- SHA512 46d29268738be307d9ec5a3b813af69f7f765f977c1883b03deab76c4b7479a7ae1af0f2674580f92ed81098090d55ac8b3ff45b7f4141871c86fe7709cee322
- SSDEEP 786432:B8uhI/itK9E1qiTFITx0Y7N7otIQkaUesr8h+zhqG8J11T98Rphho+R4cvFg0:Cu0itKSqwFgj7OIVeNIzhqR98Phtc0
- TLSH T15E873394A6909EBCF4E71A3D66E1C86241B1B8C5077EF1C7DA244D140FB37EC9CB8929
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects executables using Telegram Chat Bot
-
Enumerates VirtualBox DLL files
-
Executes dropped EXE
-
Loads dropped DLL