General
- Target 2026-08-22_5d20a175e9758c158dbf4db0ed74dad4_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 10.7MB
- Sample260823-jq8bpay1ev
- SHA256 2c10e17ba085ca5aa57f3bf04cf3ac84d47014adb19b7e8b05bd9118faa50dd1
- MD5 5d20a175e9758c158dbf4db0ed74dad4
- SHA1 7c014a461679d68c4ea1d0ffc6b212e048996cea
- SHA512 65c1e961ca9ab54710ce1e3a1d197972437c8a3ec02ae116c9056460b606975e205d5b8bb2e39c8168818d81fe39507034a8e3cc6d1b50fbc4d60936d48415c8
- SSDEEP 196608:JcIaXMCHGLLc54i1wN+iV0cSXl74w4lqD40BL8lTYwveH4/pFDuOSnR7C:JPaXMCHWUjqVg74wRD40BMeYDyd2
- TLSH T153B6331DE9B01AF7FDE7923E87A2D41EE632B8651F72D8C307F841621D231D5853A262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-22_5d20a175e9758c158dbf4db0ed74dad4_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_5d20a175e9758c158dbf4db0ed74dad4_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_5d20a175e9758c158dbf4db0ed74dad4_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 10.7MB
- SHA256 2c10e17ba085ca5aa57f3bf04cf3ac84d47014adb19b7e8b05bd9118faa50dd1
- MD5 5d20a175e9758c158dbf4db0ed74dad4
- SHA1 7c014a461679d68c4ea1d0ffc6b212e048996cea
- SHA512 65c1e961ca9ab54710ce1e3a1d197972437c8a3ec02ae116c9056460b606975e205d5b8bb2e39c8168818d81fe39507034a8e3cc6d1b50fbc4d60936d48415c8
- SSDEEP 196608:JcIaXMCHGLLc54i1wN+iV0cSXl74w4lqD40BL8lTYwveH4/pFDuOSnR7C:JPaXMCHWUjqVg74wRD40BMeYDyd2
- TLSH T153B6331DE9B01AF7FDE7923E87A2D41EE632B8651F72D8C307F841621D231D5853A262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Loads dropped DLL
-
Adds Run key to start application