General
- Target 2026-08-23_be036fa807de5c4f53981790f1854450_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 16.6MB
- Sample260825-166apsba78
- SHA256 f9e86f648890025f52eab0f12d79dd0c9fe113d21738843edb8918f96b87fea1
- MD5 be036fa807de5c4f53981790f1854450
- SHA1 113deb1950ccb6156d88f7f47c914ab000adebee
- SHA512 c69774e7ef8c08d8e5aa125904d14dd0a2c8c7fe4cd2612c768b1747bfc75fbdba573a54e46b4bc0370a3cde64ea8d906bbca38af0d9111e4d8eed109defd054
- SSDEEP 393216:3qRIDXEAphVti510MjunpAS2fajqH/vUr3n0W:3qRIDRphE10MEmbajqfvUr3D
- TLSH T14D073318BB2010FAE8F6403D99D29C52B7E2B7161FA5E3EF26A412653F3B5E05D3C650
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-23_be036fa807de5c4f53981790f1854450_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_be036fa807de5c4f53981790f1854450_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_be036fa807de5c4f53981790f1854450_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 16.6MB
- SHA256 f9e86f648890025f52eab0f12d79dd0c9fe113d21738843edb8918f96b87fea1
- MD5 be036fa807de5c4f53981790f1854450
- SHA1 113deb1950ccb6156d88f7f47c914ab000adebee
- SHA512 c69774e7ef8c08d8e5aa125904d14dd0a2c8c7fe4cd2612c768b1747bfc75fbdba573a54e46b4bc0370a3cde64ea8d906bbca38af0d9111e4d8eed109defd054
- SSDEEP 393216:3qRIDXEAphVti510MjunpAS2fajqH/vUr3n0W:3qRIDRphE10MEmbajqfvUr3D
- TLSH T14D073318BB2010FAE8F6403D99D29C52B7E2B7161FA5E3EF26A412653F3B5E05D3C650
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables Task Manager via registry modification
-
Loads dropped DLL
-
Adds Run key to start application