General
- Target 2026-08-19_ce6f3fd4b9c846c18f1738cb51a23c53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 22.1MB
- Sample260819-ex2ehawfmb
- SHA256 0942be79feccb1fc8d7f1d5840c8290205ae97753ea6c0e19d0e000e5cfe5039
- MD5 ce6f3fd4b9c846c18f1738cb51a23c53
- SHA1 08a7816d61e26eb5f5a8f7b96366d04e86d3d1e5
- SHA512 1a8ba070708b54f175b6ca0d7864c2e15ea465ce8a6c29328fea0cfaf7f60d79af1f3687dd7fe48e3a1e2a245e5952e6c05576e85dc8dcf7b8bf053806cca81a
- SSDEEP 393216:hImQVCXMCHWUjhkLfkha9+WHT4XLMtlrua5e/1vUk2odaI82SA5Kz+4lC+Uk:6m5XMb8h0fkhanHTvPu3NUk2DInKzfU
- TLSH T1E9373301DB50A1FAF8EF847EC4E25153A7ABB80B4B55C6DFA2A477356E330D0193C269
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_ce6f3fd4b9c846c18f1738cb51a23c53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_ce6f3fd4b9c846c18f1738cb51a23c53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_ce6f3fd4b9c846c18f1738cb51a23c53_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 22.1MB
- SHA256 0942be79feccb1fc8d7f1d5840c8290205ae97753ea6c0e19d0e000e5cfe5039
- MD5 ce6f3fd4b9c846c18f1738cb51a23c53
- SHA1 08a7816d61e26eb5f5a8f7b96366d04e86d3d1e5
- SHA512 1a8ba070708b54f175b6ca0d7864c2e15ea465ce8a6c29328fea0cfaf7f60d79af1f3687dd7fe48e3a1e2a245e5952e6c05576e85dc8dcf7b8bf053806cca81a
- SSDEEP 393216:hImQVCXMCHWUjhkLfkha9+WHT4XLMtlrua5e/1vUk2odaI82SA5Kz+4lC+Uk:6m5XMb8h0fkhanHTvPu3NUk2DInKzfU
- TLSH T1E9373301DB50A1FAF8EF847EC4E25153A7ABB80B4B55C6DFA2A477356E330D0193C269
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext