General
- Target 2026-08-23_25d15c366d47216bfc9bbcc108f3a391_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 26.2MB
- Sample260824-sveplshr7w
- SHA256 82decc3586009d67b69f05b02f7708c66e50d014d0ed5406d286e11eebbea3d2
- MD5 25d15c366d47216bfc9bbcc108f3a391
- SHA1 c5d259bdd3b24c15e23348a48bbe8043fce465fb
- SHA512 dff9e5a274cc6cc29b228651d0bcd6b041c9e6b95992661c7fcdaf8e236274b5c3e16f015041b82703574e915bb9e3bda0fee03f210a12d812bad6b25c7d3dcc
- SSDEEP 786432:G5vzUSNvUMOtHvQZIHLOSC1QtIK/di1oFZSh:G9zNvUMOtHYuHK7iI+zZSh
- TLSH T1B357336392D504EFC8D2017566EA80BCAF92FD979BE1D58E2F7016121DE32C9843FE61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-23_25d15c366d47216bfc9bbcc108f3a391_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_25d15c366d47216bfc9bbcc108f3a391_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_25d15c366d47216bfc9bbcc108f3a391_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 26.2MB
- SHA256 82decc3586009d67b69f05b02f7708c66e50d014d0ed5406d286e11eebbea3d2
- MD5 25d15c366d47216bfc9bbcc108f3a391
- SHA1 c5d259bdd3b24c15e23348a48bbe8043fce465fb
- SHA512 dff9e5a274cc6cc29b228651d0bcd6b041c9e6b95992661c7fcdaf8e236274b5c3e16f015041b82703574e915bb9e3bda0fee03f210a12d812bad6b25c7d3dcc
- SSDEEP 786432:G5vzUSNvUMOtHvQZIHLOSC1QtIK/di1oFZSh:G9zNvUMOtHYuHK7iI+zZSh
- TLSH T1B357336392D504EFC8D2017566EA80BCAF92FD979BE1D58E2F7016121DE32C9843FE61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1