General
- Target 2026-08-19_fe78ffb5f6ca1a69534875c045eaaea6_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 74.5MB
- Sample260819-rnx2yax1ft
- SHA256 77c16babb964b807db2c722266c28c85d0c8cfc9ba44ed1c59f9f10b3a5b6187
- MD5 fe78ffb5f6ca1a69534875c045eaaea6
- SHA1 f27df368ee2b9aee6f42a04b4565f263423facb6
- SHA512 2316d9631d5ef4512c8ed2c4858c5793ab25705a32b83aa2e74dc10e005fbc6336d15f7475fb400e12a0c7636bb4b3bdcfeb7eb97e06d8cb5f6de7f18451e24f
- SSDEEP 1572864:H96g1/VPIW3PEhqKVZVd1AEJ5Rh1+BDDy4gds8KN2BXAhPyUuMGk2GV93zz:1pI3jVd1AY5bADDxgds88hPNhn2Gz
- TLSH T1C0083399AF0868C4F25D4536C217CB4DBAE6E42546AE8D0707E4087E0D5B2CC7EFEE91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-19_fe78ffb5f6ca1a69534875c045eaaea6_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_fe78ffb5f6ca1a69534875c045eaaea6_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_fe78ffb5f6ca1a69534875c045eaaea6_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 74.5MB
- SHA256 77c16babb964b807db2c722266c28c85d0c8cfc9ba44ed1c59f9f10b3a5b6187
- MD5 fe78ffb5f6ca1a69534875c045eaaea6
- SHA1 f27df368ee2b9aee6f42a04b4565f263423facb6
- SHA512 2316d9631d5ef4512c8ed2c4858c5793ab25705a32b83aa2e74dc10e005fbc6336d15f7475fb400e12a0c7636bb4b3bdcfeb7eb97e06d8cb5f6de7f18451e24f
- SSDEEP 1572864:H96g1/VPIW3PEhqKVZVd1AEJ5Rh1+BDDy4gds8KN2BXAhPyUuMGk2GV93zz:1pI3jVd1AY5bADDxgds88hPNhn2Gz
- TLSH T1C0083399AF0868C4F25D4536C217CB4DBAE6E42546AE8D0707E4087E0D5B2CC7EFEE91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.