General
- Target 2026-08-22_9dcf4554db164f18ca5264525d7a9250_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 24.4MB
- Sample260822-ebwl5aep5z
- SHA256 324e43382b9097db77e108ee40198107873f04991af3459b27b7c0f181c4cbf4
- MD5 9dcf4554db164f18ca5264525d7a9250
- SHA1 05edc3a052e277b57d2cc5f31021326a182aa644
- SHA512 c702169e1b9b4fdfa3aab1690ac6991788748fac355f4205bbdd0e99b88d73e0734e1bbcae12e3b9ba1714132d57dc279d05b1bf509a34dab2943d4e1e43b055
- SSDEEP 786432:7BI9alkVl8ZF+W8MVSXMb8HrRQ766Uvur5UdICZo6RP:7usPF+WTScUw3rSp9
- TLSH T18E473348BFA604A5E9DD133989F5843696907DFD0BF1C29BC6B907A219A30E4FE34173
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-22_9dcf4554db164f18ca5264525d7a9250_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_9dcf4554db164f18ca5264525d7a9250_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_9dcf4554db164f18ca5264525d7a9250_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 24.4MB
- SHA256 324e43382b9097db77e108ee40198107873f04991af3459b27b7c0f181c4cbf4
- MD5 9dcf4554db164f18ca5264525d7a9250
- SHA1 05edc3a052e277b57d2cc5f31021326a182aa644
- SHA512 c702169e1b9b4fdfa3aab1690ac6991788748fac355f4205bbdd0e99b88d73e0734e1bbcae12e3b9ba1714132d57dc279d05b1bf509a34dab2943d4e1e43b055
- SSDEEP 786432:7BI9alkVl8ZF+W8MVSXMb8HrRQ766Uvur5UdICZo6RP:7usPF+WTScUw3rSp9
- TLSH T18E473348BFA604A5E9DD133989F5843696907DFD0BF1C29BC6B907A219A30E4FE34173
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.