General
- Target 2026-08-17_ea4e29a96d32f666b8fff9cf6e4d5a5d_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 13.0MB
- Sample260818-c779padj6t
- SHA256 489e939948ddccda37a77dffc90815fd0b0596f4b01ff25482dd95fe78278165
- MD5 ea4e29a96d32f666b8fff9cf6e4d5a5d
- SHA1 caa92bf601573b34b5c5ce6d942ca82a37903310
- SHA512 b3fbe3106732942936301eddaca5afddd8ac0836d3de18de17ab205c779560d18876571b6e8a2b2fb5c7062f7cbcccd664617323e80aa71274083617bd528586
- SSDEEP 393216:Uer+rXEAphVta510MjHe6yajV9vUr5u5/:UPRphc10MrepajHvUr5uF
- TLSH T112D63358B75001FBF5BA403D9AA6D861B3F232121B52C3DB17A412612F7B6F42D3DBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-17_ea4e29a96d32f666b8fff9cf6e4d5a5d_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_ea4e29a96d32f666b8fff9cf6e4d5a5d_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 13.0MB
- SHA256 489e939948ddccda37a77dffc90815fd0b0596f4b01ff25482dd95fe78278165
- MD5 ea4e29a96d32f666b8fff9cf6e4d5a5d
- SHA1 caa92bf601573b34b5c5ce6d942ca82a37903310
- SHA512 b3fbe3106732942936301eddaca5afddd8ac0836d3de18de17ab205c779560d18876571b6e8a2b2fb5c7062f7cbcccd664617323e80aa71274083617bd528586
- SSDEEP 393216:Uer+rXEAphVta510MjHe6yajV9vUr5u5/:UPRphc10MrepajHvUr5uF
- TLSH T112D63358B75001FBF5BA403D9AA6D861B3F232121B52C3DB17A412612F7B6F42D3DBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.