General
- Target 2026-08-20_4c5db9f52752628d0c12c728c67130c5_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 17.6MB
- Sample260821-dk2dasfn2s
- SHA256 a3f1065e6bbe9362b311412680cbf1ab5c8e41bcea12b549cf840b90805bf494
- MD5 4c5db9f52752628d0c12c728c67130c5
- SHA1 12f76d5aba778b48fd9e068125c7c97897d8ae28
- SHA512 70eb7af93d908120e6e22073338e3b5edb65d625023dbc43ce1f6934e0f0622c5e693a321a93d03328108302750bc4b5fc92fabceee452e85feecf8a7367f735
- SSDEEP 393216:6qKbZroEAmURLAzXEAphVtp510MjyB+KaO2fvUr5WxD:6qKlodmUJAzRphP10MkLaOQvUr5WN
- TLSH T11B073368BB9001FBE69A403D45E2D8A3FBE232571B95D2EF07A041663E776F05E3C950
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-20_4c5db9f52752628d0c12c728c67130c5_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_4c5db9f52752628d0c12c728c67130c5_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 17.6MB
- SHA256 a3f1065e6bbe9362b311412680cbf1ab5c8e41bcea12b549cf840b90805bf494
- MD5 4c5db9f52752628d0c12c728c67130c5
- SHA1 12f76d5aba778b48fd9e068125c7c97897d8ae28
- SHA512 70eb7af93d908120e6e22073338e3b5edb65d625023dbc43ce1f6934e0f0622c5e693a321a93d03328108302750bc4b5fc92fabceee452e85feecf8a7367f735
- SSDEEP 393216:6qKbZroEAmURLAzXEAphVtp510MjyB+KaO2fvUr5WxD:6qKlodmUJAzRphP10MkLaOQvUr5WN
- TLSH T11B073368BB9001FBE69A403D45E2D8A3FBE232571B95D2EF07A041663E776F05E3C950
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.