General
- Target 2026-08-24_ab00240927b165cfbd4398c92b2aacd2_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 23.5MB
- Sample260825-fb5qgasybt
- SHA256 df3e09c2c28c9f5bd42b3217e0b08750afda321209c0f34c5efe5d2cff5f0be4
- MD5 ab00240927b165cfbd4398c92b2aacd2
- SHA1 afd6ede7e46ad21b606b6fb26799caf5c8a9b646
- SHA512 80994a8bcffacfbd7fe7d798837f4d02d0ac1e4d2b7a4dd7ff7a5e23d47e2c5cafba3bb4a49b3a0903dbac658d960d0f8726a8f384d5bf2c8800034e27c7f0d9
- SSDEEP 393216:5dN9DKZNH/emmZO1oI2kSWprQucNx/vIzsY6rX5IWqCe71wl0gW0:diaI2kSWprvqBIoHxqCsuVW
- TLSH T1EA47DF53F242C198C82699358D52DBE693327C19AF12579B3280BF1F7EB36C05E7A781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-24_ab00240927b165cfbd4398c92b2aacd2_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_ab00240927b165cfbd4398c92b2aacd2_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_ab00240927b165cfbd4398c92b2aacd2_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 23.5MB
- SHA256 df3e09c2c28c9f5bd42b3217e0b08750afda321209c0f34c5efe5d2cff5f0be4
- MD5 ab00240927b165cfbd4398c92b2aacd2
- SHA1 afd6ede7e46ad21b606b6fb26799caf5c8a9b646
- SHA512 80994a8bcffacfbd7fe7d798837f4d02d0ac1e4d2b7a4dd7ff7a5e23d47e2c5cafba3bb4a49b3a0903dbac658d960d0f8726a8f384d5bf2c8800034e27c7f0d9
- SSDEEP 393216:5dN9DKZNH/emmZO1oI2kSWprQucNx/vIzsY6rX5IWqCe71wl0gW0:diaI2kSWprvqBIoHxqCsuVW
- TLSH T1EA47DF53F242C198C82699358D52DBE693327C19AF12579B3280BF1F7EB36C05E7A781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.