General
- Target 2026-08-17_af331df64232fac1636a2aea5846e2cd_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 31.1MB
- Sample260818-df63zsvcpg
- SHA256 2b009525e90263abd7258aff849be97bb5c96a794df8fcdfa865a8ed5520a4bf
- MD5 af331df64232fac1636a2aea5846e2cd
- SHA1 56678bdd5c38f6fe26cc1aad460638f8707ad334
- SHA512 40864bfe13b01a3b07e3799b190023b09709b3664553bfe400b4206ccceabd3476350ee1267e1695a894da113390a4cbf37658dfbc8ab407216b4f97230517ec
- SSDEEP 786432:CYHBprIgfsL1MruRO0E12nX0VmQpylHUGGuRlmvxp2kfoHUfpiY8cnGCnkKi2nRG:CYdruRO0E12nXSKixp2SoHUhIcnGCnkj
- TLSH T1DB6733E8E4C118E7F6A30931C4EFA576E6F8FA221771D45F026142821F235F6B539E68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-17_af331df64232fac1636a2aea5846e2cd_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_af331df64232fac1636a2aea5846e2cd_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_af331df64232fac1636a2aea5846e2cd_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 31.1MB
- SHA256 2b009525e90263abd7258aff849be97bb5c96a794df8fcdfa865a8ed5520a4bf
- MD5 af331df64232fac1636a2aea5846e2cd
- SHA1 56678bdd5c38f6fe26cc1aad460638f8707ad334
- SHA512 40864bfe13b01a3b07e3799b190023b09709b3664553bfe400b4206ccceabd3476350ee1267e1695a894da113390a4cbf37658dfbc8ab407216b4f97230517ec
- SSDEEP 786432:CYHBprIgfsL1MruRO0E12nX0VmQpylHUGGuRlmvxp2kfoHUfpiY8cnGCnkKi2nRG:CYdruRO0E12nXSKixp2SoHUhIcnGCnkj
- TLSH T1DB6733E8E4C118E7F6A30931C4EFA576E6F8FA221771D45F026142821F235F6B539E68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.