Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
20/08/2026, 06:03
General
- Target 2026-08-20_3685581f0a375ae2cad63a861f626d68_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
- Size 13.7MB
- Sample260820-gr5ababf77
- SHA256 c75af7b243822cd1ef2bcfdffc76b5156dc1acdcf5091b1d99cb27288f24c85f
Malware Config
Signatures
- Loads dropped DLL 18 IoCs
- UPX packed file 50 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-20_3685581f0a375ae2cad63a861f626d68_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-20_3685581f0a375ae2cad63a861f626d68_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\2026-08-20_3685581f0a375ae2cad63a861f626d68_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-20_3685581f0a375ae2cad63a861f626d68_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe"2⤵
- Loads dropped DLL
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
VCRUNTIME140.dll
VCRUNTIME140_1.dll
_bz2.pyd
_ctypes.pyd
_hashlib.pyd
_lzma.pyd
_queue.pyd
_socket.pyd
_sqlite3.pyd
_ssl.pyd
_wmi.pyd
_zstd.pyd
base_library.zip
libcrypto-3.dll
libffi-8.dll
libssl-3.dll
python314.dll
Lorem ipsum.txt
sqlite3.dll
memory/360-166-0x00007FFFB6E40000-0x00007FFFB6E54000-memory.dmp
memory/360-181-0x00007FFFB0F70000-0x00007FFFB10FA000-memory.dmp
memory/360-159-0x00007FFFBE480000-0x00007FFFBE48F000-memory.dmp
memory/360-156-0x00007FFFBECC0000-0x00007FFFBECCD000-memory.dmp
memory/360-152-0x00007FFFB6E60000-0x00007FFFB6E7A000-memory.dmp
memory/360-167-0x00007FFFABF00000-0x00007FFFAC531000-memory.dmp
memory/360-147-0x00007FFFB7580000-0x00007FFFB75AC000-memory.dmp
memory/360-164-0x0000017228980000-0x000001722908D000-memory.dmp
memory/360-144-0x00007FFFB75B0000-0x00007FFFB75CA000-memory.dmp
memory/360-172-0x00007FFFB4D20000-0x00007FFFB4D56000-memory.dmp
memory/360-140-0x00007FFFC0050000-0x00007FFFC005F000-memory.dmp
memory/360-174-0x00007FFFB2F00000-0x00007FFFB3053000-memory.dmp
memory/360-171-0x00007FFFB75D0000-0x00007FFFB75F9000-memory.dmp
memory/360-138-0x00007FFFB75D0000-0x00007FFFB75F9000-memory.dmp
memory/360-133-0x0000017228980000-0x000001722908D000-memory.dmp
memory/360-131-0x0000017228980000-0x000001722908D000-memory.dmp
memory/360-179-0x00007FFFB6E10000-0x00007FFFB6E36000-memory.dmp
memory/360-149-0x00007FFFB35B0000-0x00007FFFB3630000-memory.dmp
memory/360-183-0x00007FFFBE480000-0x00007FFFBE48F000-memory.dmp
memory/360-184-0x00007FFFB6E40000-0x00007FFFB6E54000-memory.dmp
memory/360-186-0x00007FFFB75D0000-0x00007FFFB75F9000-memory.dmp
memory/360-196-0x00007FFFB4D20000-0x00007FFFB4D56000-memory.dmp
memory/360-197-0x00007FFFB2F00000-0x00007FFFB3053000-memory.dmp
memory/360-199-0x00007FFFB0F70000-0x00007FFFB10FA000-memory.dmp
memory/360-195-0x00007FFFABF00000-0x00007FFFAC531000-memory.dmp
memory/360-185-0x0000017228980000-0x000001722908D000-memory.dmp
memory/360-194-0x00007FFFB6E40000-0x00007FFFB6E54000-memory.dmp
memory/360-193-0x00007FFFBE480000-0x00007FFFBE48F000-memory.dmp
memory/360-192-0x00007FFFBECC0000-0x00007FFFBECCD000-memory.dmp
memory/360-191-0x00007FFFB6E60000-0x00007FFFB6E7A000-memory.dmp
memory/360-190-0x00007FFFB35B0000-0x00007FFFB3630000-memory.dmp
memory/360-189-0x00007FFFB7580000-0x00007FFFB75AC000-memory.dmp
memory/360-188-0x00007FFFB75B0000-0x00007FFFB75CA000-memory.dmp
memory/360-187-0x00007FFFC0050000-0x00007FFFC005F000-memory.dmp
memory/360-198-0x00007FFFB6E10000-0x00007FFFB6E36000-memory.dmp