General
- Target 2026-08-19_70f71e4236a0bc2f368fd0616e11ec67_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 65.4MB
- Sample260820-aj5sjsae35
- SHA256 25f2b4ae6ddc55d32a6b94e67e4dc614557d8aa0bd056db9ea37efb840da7dcd
- MD5 70f71e4236a0bc2f368fd0616e11ec67
- SHA1 a76cb0e36d063ae26afd6bd3abbb7487e3593004
- SHA512 c4f52ddce0323c651ab85e8764438e9a62a2547d260ecba16208c83d93b4436b8746350b2a4f34647f70953648bfacff933eef6f949656280f4b20fe6c2dd51d
- SSDEEP 1572864:oKiPEhqKVZVd1AEJ5Rh1+BDDy4gds8KN21iILhPyKKEZ486p:tjVd1AY5bADDxgds8PLhPlKEI
- TLSH T1E5E7336997146589E3BA53768317CA0DEDE6F00F875F844B27A0043A3D6B6CA64FEF01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-19_70f71e4236a0bc2f368fd0616e11ec67_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_70f71e4236a0bc2f368fd0616e11ec67_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 65.4MB
- SHA256 25f2b4ae6ddc55d32a6b94e67e4dc614557d8aa0bd056db9ea37efb840da7dcd
- MD5 70f71e4236a0bc2f368fd0616e11ec67
- SHA1 a76cb0e36d063ae26afd6bd3abbb7487e3593004
- SHA512 c4f52ddce0323c651ab85e8764438e9a62a2547d260ecba16208c83d93b4436b8746350b2a4f34647f70953648bfacff933eef6f949656280f4b20fe6c2dd51d
- SSDEEP 1572864:oKiPEhqKVZVd1AEJ5Rh1+BDDy4gds8KN21iILhPyKKEZ486p:tjVd1AY5bADDxgds8PLhPlKEI
- TLSH T1E5E7336997146589E3BA53768317CA0DEDE6F00F875F844B27A0043A3D6B6CA64FEF01
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.