General
- Target 2026-08-20_7618c58ab78e3b05d17259ad7dd0765f_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 78.4MB
- Sample260820-gh48ystscy
- SHA256 810c6da8d66862bfc49b235a129e5876d7a2ad55d4dbe829ea0ed7fd5377b235
- MD5 7618c58ab78e3b05d17259ad7dd0765f
- SHA1 d70a70f5e5e3cdeb88ee5db50e55d928c68f4040
- SHA512 59af82bdd53b5591d583f62b72036a556105cebb0f92ba4565206e009322c866e40d53a3182650757f7f20a5af15d3c9d47ff341ee381f770e4e1d5159989d40
- SSDEEP 1572864:O4f//FYEUZl7XNyjhQR5QMJJ8R/E0/utd0xygPhdXahkK+yJodylwp83P:1fSEQlLgaR55oR/E0/kd0xFTah+pq
- TLSH T1220833C57A553677EDA505312A81AC2AE1D830985F66C3AF1FF466362B27340EF30EE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-20_7618c58ab78e3b05d17259ad7dd0765f_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_7618c58ab78e3b05d17259ad7dd0765f_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_7618c58ab78e3b05d17259ad7dd0765f_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 78.4MB
- SHA256 810c6da8d66862bfc49b235a129e5876d7a2ad55d4dbe829ea0ed7fd5377b235
- MD5 7618c58ab78e3b05d17259ad7dd0765f
- SHA1 d70a70f5e5e3cdeb88ee5db50e55d928c68f4040
- SHA512 59af82bdd53b5591d583f62b72036a556105cebb0f92ba4565206e009322c866e40d53a3182650757f7f20a5af15d3c9d47ff341ee381f770e4e1d5159989d40
- SSDEEP 1572864:O4f//FYEUZl7XNyjhQR5QMJJ8R/E0/utd0xygPhdXahkK+yJodylwp83P:1fSEQlLgaR55oR/E0/kd0xFTah+pq
- TLSH T1220833C57A553677EDA505312A81AC2AE1D830985F66C3AF1FF466362B27340EF30EE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.