General
- Target 2026-08-25_e06cb70b0817ff6ad8b115a077317968_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 11.2MB
- Sample260826-hjx2psca77
- SHA256 7aa4fdcc1ed1f1209f22feb7541a504530170a7ffcaa5fed7f28da7c592bbe2c
- MD5 e06cb70b0817ff6ad8b115a077317968
- SHA1 682a28e56827519b43c65d1129ea449cf9148a9c
- SHA512 16440efe12470c951fd015f7c0c90b161da88e2f3f2f3b9667bcafd08255db3772f7dfc25c41719c276157ef3e503739307a0a5426f85b8e9630f7571276fab8
- SSDEEP 196608:h9RNzM+6Fp/Pa8l4fa85DbJrteYS3A1HeT39IigbauDXURuATCmEL:h9RNz1Wc8l4S85vz1x1+TtIihuARuATa
- TLSH T1EBC6335652A208F9E9F2813A81F6C14AF331B8961735E3DF17A00A476F377D25C3AE61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-25_e06cb70b0817ff6ad8b115a077317968_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
10 signatures
900 seconds
Malware Config
Targets
-
- Target 2026-08-25_e06cb70b0817ff6ad8b115a077317968_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 11.2MB
- SHA256 7aa4fdcc1ed1f1209f22feb7541a504530170a7ffcaa5fed7f28da7c592bbe2c
- MD5 e06cb70b0817ff6ad8b115a077317968
- SHA1 682a28e56827519b43c65d1129ea449cf9148a9c
- SHA512 16440efe12470c951fd015f7c0c90b161da88e2f3f2f3b9667bcafd08255db3772f7dfc25c41719c276157ef3e503739307a0a5426f85b8e9630f7571276fab8
- SSDEEP 196608:h9RNzM+6Fp/Pa8l4fa85DbJrteYS3A1HeT39IigbauDXURuATCmEL:h9RNz1Wc8l4S85vz1x1+TtIihuARuATa
- TLSH T1EBC6335652A208F9E9F2813A81F6C14AF331B8961735E3DF17A00A476F377D25C3AE61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Disables one or more Microsoft Defender components
Uses the Powershell Set-MpPreference cmdlet to disable one or more Microsoft Defender components.
-
Loads dropped DLL
-
Stops running service(s)