General
- Target 2026-08-22_7fde1277be569bb73af2c18bc93a9b77_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 13.4MB
- Sample260823-gm684stbka
- SHA256 f4ed262df4f295194870b34d37e3087d7ef88f7be4bb739ae0ddb136bdfded5b
- MD5 7fde1277be569bb73af2c18bc93a9b77
- SHA1 8d5babb1857c0301d1a26b20704c47568c355f11
- SHA512 82f84a2caab209806ff3855f525c0182350e9b93290b7ae028bf6aef44c9a6b21a5025adccb1f26c77fe48304d06b4fef1d1f265487b64c1a448db5ed3fb93f1
- SSDEEP 196608:C4nujQbG8dhsqlGNP+AEXEpXnH2ph1iutlxSiLCw10+u41ZPcUcmotyavonYpPTQ:ZuEC5qVAEXEAphVtD510MjVYyavUYD
- TLSH T10CE6127776AA135FF42321F47A5CF8C620E0D3177BFA4A5B839F1F491106AA9AE1C211
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
2026-08-22_7fde1277be569bb73af2c18bc93a9b77_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_7fde1277be569bb73af2c18bc93a9b77_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_7fde1277be569bb73af2c18bc93a9b77_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 13.4MB
- SHA256 f4ed262df4f295194870b34d37e3087d7ef88f7be4bb739ae0ddb136bdfded5b
- MD5 7fde1277be569bb73af2c18bc93a9b77
- SHA1 8d5babb1857c0301d1a26b20704c47568c355f11
- SHA512 82f84a2caab209806ff3855f525c0182350e9b93290b7ae028bf6aef44c9a6b21a5025adccb1f26c77fe48304d06b4fef1d1f265487b64c1a448db5ed3fb93f1
- SSDEEP 196608:C4nujQbG8dhsqlGNP+AEXEpXnH2ph1iutlxSiLCw10+u41ZPcUcmotyavonYpPTQ:ZuEC5qVAEXEAphVtD510MjVYyavUYD
- TLSH T10CE6127776AA135FF42321F47A5CF8C620E0D3177BFA4A5B839F1F491106AA9AE1C211
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE
-
Loads dropped DLL