General
- Target 2026-09-05_5a65bcb632628b89b782063f6c1e78f6_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 34.6MB
- Sample260907-1a1eksgp8w
- SHA256 c903bf1a932ee516840ae00f5374b5de61bd6b5161b78d0cec78281e440f0741
- MD5 5a65bcb632628b89b782063f6c1e78f6
- SHA1 c0b7a913dd438cd92a17c1b9d35070f965904559
- SHA512 03734832aca4646639ae2c3bc38446f37c32d130c09bf0ba3ede3797a944d3c9e6f12b91ab4ed36e4faac2ac4e1666d34f0609b0c72e32b0cbf11e8861e201f7
- SSDEEP 786432:75SaTquYlW8tHaGziuilenGCnkHP9k2i2nRwm4sXeTYGBGNNyU4G3jhjIjCX34:7PYWR0izknGCnkHlImyYmqNyU4G3FVn4
- TLSH T14D873389BAC204DBE4D94735A8F395B441F479E31779D02F87AB061238636E7BE76308
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-09-05_5a65bcb632628b89b782063f6c1e78f6_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_5a65bcb632628b89b782063f6c1e78f6_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_5a65bcb632628b89b782063f6c1e78f6_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 34.6MB
- SHA256 c903bf1a932ee516840ae00f5374b5de61bd6b5161b78d0cec78281e440f0741
- MD5 5a65bcb632628b89b782063f6c1e78f6
- SHA1 c0b7a913dd438cd92a17c1b9d35070f965904559
- SHA512 03734832aca4646639ae2c3bc38446f37c32d130c09bf0ba3ede3797a944d3c9e6f12b91ab4ed36e4faac2ac4e1666d34f0609b0c72e32b0cbf11e8861e201f7
- SSDEEP 786432:75SaTquYlW8tHaGziuilenGCnkHP9k2i2nRwm4sXeTYGBGNNyU4G3jhjIjCX34:7PYWR0izknGCnkHlImyYmqNyU4G3FVn4
- TLSH T14D873389BAC204DBE4D94735A8F395B441F479E31779D02F87AB061238636E7BE76308
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL