General
- Target 2026-08-23_a9e6a2e4ffc7a5dfdca587145bf05bc7_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 23.5MB
- Sample260824-ckd3bssbrh
- SHA256 2c3b0c6d92c290116cdf6466fdc2a165a2301d421591ac97630154bd73fa3440
- MD5 a9e6a2e4ffc7a5dfdca587145bf05bc7
- SHA1 28b3d9efe200e706813e5f8f30850f19a4230686
- SHA512 952ec0b2efa4a0f76ecf77e8a1a230c171919a3ecee7cb74700d16de7a9cd1adc9c189ceea955b24b4059f5fe9ed7df333de012029cea2946e64a55da3fe4bd6
- SSDEEP 393216:/cdQbGNH/emmcj41oI2kSWprQucNx/vIzsY6rX5IWqCe71wl0gW0:D5aI2kSWprvqBIoHxqCsuVW
- TLSH T16047CF53F242C198C82699358E52DBE693327C19AF12579B3280BF1F7EB32C15E76781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-23_a9e6a2e4ffc7a5dfdca587145bf05bc7_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_a9e6a2e4ffc7a5dfdca587145bf05bc7_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_a9e6a2e4ffc7a5dfdca587145bf05bc7_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 23.5MB
- SHA256 2c3b0c6d92c290116cdf6466fdc2a165a2301d421591ac97630154bd73fa3440
- MD5 a9e6a2e4ffc7a5dfdca587145bf05bc7
- SHA1 28b3d9efe200e706813e5f8f30850f19a4230686
- SHA512 952ec0b2efa4a0f76ecf77e8a1a230c171919a3ecee7cb74700d16de7a9cd1adc9c189ceea955b24b4059f5fe9ed7df333de012029cea2946e64a55da3fe4bd6
- SSDEEP 393216:/cdQbGNH/emmcj41oI2kSWprQucNx/vIzsY6rX5IWqCe71wl0gW0:D5aI2kSWprvqBIoHxqCsuVW
- TLSH T16047CF53F242C198C82699358E52DBE693327C19AF12579B3280BF1F7EB32C15E76781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.