General
- Target 2026-09-04_8ed1156207edf949c1ef15fdc5cbf4ba_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 10.9MB
- Sample260905-ea8kassyfz
- SHA256 8ab03d9dd07f181742da1811d26cdc646d086837706e8640c320df54549f1fe1
- MD5 8ed1156207edf949c1ef15fdc5cbf4ba
- SHA1 6f6a452c54d6963a3646278f875f62ae8f4b3322
- SHA512 644e8983b1b3e9babb468bdc772021e86c584407f99ba3eb77198c4e0b81154d40b5e2dc89a29c5b9a0ebd19fdbc0de75048190810a59915ea8e47c507cf3de0
- SSDEEP 196608:7oUqcm+0W8UAf9uPnGCxdGjP5xMwJTWeS4Jkz9Rwpr2Zwl68PUVrJmVEHMrtBGtE:LqpZW8kPnGCnGjrMwBWTLwqaUVrUEHMn
- TLSH T15DC633D9BFD608A4E49B933C58D24D676795B47213B586CB4BF24DA00E631EAFE30321
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-04_8ed1156207edf949c1ef15fdc5cbf4ba_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_8ed1156207edf949c1ef15fdc5cbf4ba_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_8ed1156207edf949c1ef15fdc5cbf4ba_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 10.9MB
- SHA256 8ab03d9dd07f181742da1811d26cdc646d086837706e8640c320df54549f1fe1
- MD5 8ed1156207edf949c1ef15fdc5cbf4ba
- SHA1 6f6a452c54d6963a3646278f875f62ae8f4b3322
- SHA512 644e8983b1b3e9babb468bdc772021e86c584407f99ba3eb77198c4e0b81154d40b5e2dc89a29c5b9a0ebd19fdbc0de75048190810a59915ea8e47c507cf3de0
- SSDEEP 196608:7oUqcm+0W8UAf9uPnGCxdGjP5xMwJTWeS4Jkz9Rwpr2Zwl68PUVrJmVEHMrtBGtE:LqpZW8kPnGCnGjrMwBWTLwqaUVrUEHMn
- TLSH T15DC633D9BFD608A4E49B933C58D24D676795B47213B586CB4BF24DA00E631EAFE30321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application