General
- Target 2026-09-08_cbb151cdf856ba2f891d08619a8b447f_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 13.3MB
- Sample260908-pammyafc33
- SHA256 4348bcbd8b196dd050d01ff63aa72951d119114e6fb250b7c632fae073053e21
- MD5 cbb151cdf856ba2f891d08619a8b447f
- SHA1 c0b4089d779620030e2c9f6d691303b7e6921739
- SHA512 b1f1d24794d7094b8d33a5088fb428f5fbaef0f649fbfc138b2a21e92c7d02324b5e9a38e05ee58696d32eb1d49f1791d9c6df2ca346c4bf69bb0a4d6ad13d21
- SSDEEP 393216:X85vzaVLeCMw1r+8ADtAiwVo/xQpBiz8UIiB:M5vzmeCMw1LgtAimwQPG8RiB
- TLSH T120E63309A38045E7D1F356799663D02596F3B9134FB08AEF47B022691E236E06E7EF34
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-09-08_cbb151cdf856ba2f891d08619a8b447f_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_cbb151cdf856ba2f891d08619a8b447f_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 13.3MB
- SHA256 4348bcbd8b196dd050d01ff63aa72951d119114e6fb250b7c632fae073053e21
- MD5 cbb151cdf856ba2f891d08619a8b447f
- SHA1 c0b4089d779620030e2c9f6d691303b7e6921739
- SHA512 b1f1d24794d7094b8d33a5088fb428f5fbaef0f649fbfc138b2a21e92c7d02324b5e9a38e05ee58696d32eb1d49f1791d9c6df2ca346c4bf69bb0a4d6ad13d21
- SSDEEP 393216:X85vzaVLeCMw1r+8ADtAiwVo/xQpBiz8UIiB:M5vzmeCMw1LgtAimwQPG8RiB
- TLSH T120E63309A38045E7D1F356799663D02596F3B9134FB08AEF47B022691E236E06E7EF34
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.