Resubmissions

26/08/2026, 06:46

260826-hjx2psca7710

26/08/2026, 05:33

260826-f87akasekh10

General

  • Target
    2026-08-25_e06cb70b0817ff6ad8b115a077317968_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
  • Size 11.2MB
  • Sample260826-hjx2psca77
  • SHA256 7aa4fdcc1ed1f1209f22feb7541a504530170a7ffcaa5fed7f28da7c592bbe2c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-25_e06cb70b0817ff6ad8b115a077317968_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
    • Size 11.2MB
    • SHA256 7aa4fdcc1ed1f1209f22feb7541a504530170a7ffcaa5fed7f28da7c592bbe2c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies Windows Defender DisableAntiSpyware settings

    • Disables one or more Microsoft Defender components

      Uses the Powershell Set-MpPreference cmdlet to disable one or more Microsoft Defender components.

    • Loads dropped DLL

    • Stops running service(s)

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

MITRE ATT&CK Enterprise v16

Tasks