General
- Target 2026-08-23_e99cf0deddbf8a1b5f7d31dd03ab3651_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 13.4MB
- Sample260823-vdzdsshq2x
- SHA256 c4265c684ce3ef82b8272c531803284e1f69eba0632cfef7be0970e14aa6941c
- MD5 e99cf0deddbf8a1b5f7d31dd03ab3651
- SHA1 b4ac678316afa8a3831782f36e1f4d0243e3eb58
- SHA512 08c82b862da2401bc707259ce285b48ef2ef55a21e42a4452f54b62a56d89a5cacc66c2bdefc66ab04bbe8c2e398d3327822b22a3ade31ecd94e06bc0627748f
- SSDEEP 393216:s85vzAaMsF1+TtIiFq8uARuAt5FXm1qgc41fYDoCb9xnkIG4uS:f5vzJF1QtI18uAb7gc42DBb9VkID
- TLSH T144E6336593E204FEE9E2153BC257C154F7667D624B22E5CB239026126F37BE08C3AF52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-23_e99cf0deddbf8a1b5f7d31dd03ab3651_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_e99cf0deddbf8a1b5f7d31dd03ab3651_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 13.4MB
- SHA256 c4265c684ce3ef82b8272c531803284e1f69eba0632cfef7be0970e14aa6941c
- MD5 e99cf0deddbf8a1b5f7d31dd03ab3651
- SHA1 b4ac678316afa8a3831782f36e1f4d0243e3eb58
- SHA512 08c82b862da2401bc707259ce285b48ef2ef55a21e42a4452f54b62a56d89a5cacc66c2bdefc66ab04bbe8c2e398d3327822b22a3ade31ecd94e06bc0627748f
- SSDEEP 393216:s85vzAaMsF1+TtIiFq8uARuAt5FXm1qgc41fYDoCb9xnkIG4uS:f5vzJF1QtI18uAb7gc42DBb9VkID
- TLSH T144E6336593E204FEE9E2153BC257C154F7667D624B22E5CB239026126F37BE08C3AF52
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.