General
- Target 2026-08-17_6cef0a25a34310417f524479199c9327_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 25.3MB
- Sample260818-dsnr6swtfs
- SHA256 ed78871f8703737700f99e2438b6a0fa0f0734ab6f94cc7b17824311d5b0d6d5
- MD5 6cef0a25a34310417f524479199c9327
- SHA1 7647b00af79a3dfb74e894311dfc64fae3628fb2
- SHA512 4e8ead9524f5de33c6c07aa1c027c89e992ad8a5bf256251e0d81745b6be7471afedfc1e63d74dd2ebead4138ac9d00b996a9e62c1a0c2aababea57f48fdcdf8
- SSDEEP 786432:75vzd21nbhVEHCYFqNW8cxOXMb8Dz5HMIlyD+8:79zM1tWtxOcj
- TLSH T1694733A5B3A904D6E0E7453249C646666397BC6403E0C5CBDFB41EA11CA30E8BF75FB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-17_6cef0a25a34310417f524479199c9327_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_6cef0a25a34310417f524479199c9327_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_6cef0a25a34310417f524479199c9327_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 25.3MB
- SHA256 ed78871f8703737700f99e2438b6a0fa0f0734ab6f94cc7b17824311d5b0d6d5
- MD5 6cef0a25a34310417f524479199c9327
- SHA1 7647b00af79a3dfb74e894311dfc64fae3628fb2
- SHA512 4e8ead9524f5de33c6c07aa1c027c89e992ad8a5bf256251e0d81745b6be7471afedfc1e63d74dd2ebead4138ac9d00b996a9e62c1a0c2aababea57f48fdcdf8
- SSDEEP 786432:75vzd21nbhVEHCYFqNW8cxOXMb8Dz5HMIlyD+8:79zM1tWtxOcj
- TLSH T1694733A5B3A904D6E0E7453249C646666397BC6403E0C5CBDFB41EA11CA30E8BF75FB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.