Analysis

  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    09/09/2026, 03:50

General

  • Target
    2026-09-07_36366610f07c911d4026aed1d915a70e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
  • Size 11.1MB
  • Sample260909-eee4js1wbv
  • SHA256 6bf4a6ae35b36e3cd4498861a74345e63902f3d387dd1fdd2f5861067f1af918
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 13 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-09-07_36366610f07c911d4026aed1d915a70e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-09-07_36366610f07c911d4026aed1d915a70e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1292
    • C:\Users\Admin\AppData\Local\Temp\2026-09-07_36366610f07c911d4026aed1d915a70e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-09-07_36366610f07c911d4026aed1d915a70e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe"
      2⤵
      • Loads dropped DLL
      PID:5004

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\VCRUNTIME140.dll
        • Size 174KB
        • SHA256 19c293ac482fdb882cd29d2b0e6d807419efdcada04068f03e5723670895e17d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\_bz2.pyd
        • Size 23KB
        • SHA256 bef82417243f5003be8b55069bce9e1b4415aa8c8d9b7f408eb229a0400cb820
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _decimal.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\_decimal.pyd
        • Size 288KB
        • SHA256 b9327e207b61117695d5ff612f16b37315bd95cd7a7b2a574a2de0c63a403455
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _hashlib.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\_hashlib.pyd
        • Size 48KB
        • SHA256 9393cb7fa1f160f46101042ddbeaa0b4d5462dc4dfd0cc03b63d93c357973df6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\_lzma.pyd
        • Size 36KB
        • SHA256 2b6d500b554f2dab067d879d8babf0e2112c486548306b0e643c0785ea2426e9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _socket.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\_socket.pyd
        • Size 71KB
        • SHA256 f053afe1d5c3d2345b52e4ad66ec17cb2d434e70c5fc148a51bb9c15e20e657c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _tkinter.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\_tkinter.pyd
        • Size 56KB
        • SHA256 5805315d411a1b61049b76813d06ae1129c8ce4a4a270c5619996738d43f0147
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-console-l1-1-0.dll
        • Size 22KB
        • SHA256 015bd08815c7b934a8952c3a7578e9ce59f21136e8a880d42bbd414bec2c6058
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-datetime-l1-1-0.dll
        • Size 22KB
        • SHA256 5534812cdbdae94ba45cb216e5eb9af686b853948df54365103555abbbaf9d9a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-debug-l1-1-0.dll
        • Size 22KB
        • SHA256 837d2b1b2cd03e03fc6ccb050698b6b5763af17c201304872342a5eae9e0a2d2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 22KB
        • SHA256 de43b165f568c276c00e95acd454e3092f352a18e95874595f4f4658c06d2ec7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-fibers-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-fibers-l1-1-0.dll
        • Size 22KB
        • SHA256 3cebc45bf479ad74cfabf2c6bfd4994d7ad639ed1221025981d19cedf9ce0416
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-fibers-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-fibers-l1-1-1.dll
        • Size 22KB
        • SHA256 5ef70308bcca628ce6b0e2856b15b1c7ae340c3f9bbbc4c1071d8c191a34a5c3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-file-l1-1-0.dll
        • Size 26KB
        • SHA256 250ac829f2617bcac1c6e5b8c4f630462e20765863ba573526a3e11bbfb94a9a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-file-l1-2-0.dll
        • Size 22KB
        • SHA256 ae14079a114733f60ce87b92cba42acd8083c2cd67594e53bc37dc0b97a4b465
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-file-l2-1-0.dll
        • Size 22KB
        • SHA256 914bf26a298713119477ea0a8e7bd43171b91344ebe24fb47ad77c49686e3d87
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-handle-l1-1-0.dll
        • Size 22KB
        • SHA256 ab5489955e371b15f77906c08ec3c7affe2c7a46a08c514ca628768b4478974b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 c70f9644d8377fa39c5b71f2e9734c1400d7598904fdeb772e8502099982dcb7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 22KB
        • SHA256 f8129710188e407bb0e6f46d30aeba277d67b947ece5fe09e883fde2323f3ae6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-kernel32-legacy-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-kernel32-legacy-l1-1-1.dll
        • Size 22KB
        • SHA256 5200b16cb2ddc61cfc07373a9a84aa85a3ab50806ca96c879c883275832944c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 22KB
        • SHA256 48786fb88b001dcd1f63acea903d3ca9cc0b3060d5a325e3f2f3cbc3bfd53166
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-localization-l1-2-0.dll
        • Size 22KB
        • SHA256 9ec3898f7eba91faa28b51616c211a2689e3a13aeef8de6e13cb674e49d689eb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-memory-l1-1-0.dll
        • Size 22KB
        • SHA256 3a6cbc524c99e1cd80d5368f5601402a37ad602528b1ab628093573ef638eb3b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 22KB
        • SHA256 97145ef89c44949fcf0f04ac834a8bc7d687ef49ee73ae9fc32f3c11136b7201
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 22KB
        • SHA256 8bc7c10b1851aea644e9c9f381cdb935e091fee6b0be3d3aedc6fffaac96adb7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 22KB
        • SHA256 d8030b777617c71f0f94564607699dbf7561487d779db9756aed378c5675213f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 22KB
        • SHA256 f5e676713340f73a03a3d41a6ec9883b431da7d16c7f07bd0a920fb80e6c0753
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-profile-l1-1-0.dll
        • Size 22KB
        • SHA256 f023d47e44d3eea6b0743580f57e8c6ba81e79d5ebfa7da26250076c647b980e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 22KB
        • SHA256 9746d8930704153578a628c010638a5f818ffe5a927e25591b108e256dc6afca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-string-l1-1-0.dll
        • Size 22KB
        • SHA256 7c53ae24c982d16ffd1bf7f918d115b11b7f30e57bc7feaa18cb9781e4abb926
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-synch-l1-1-0.dll
        • Size 22KB
        • SHA256 56d9d62ca5dba79a6581b8d574a7d8b2a64a5ecb71e47dcf06ed0285708b1859
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-synch-l1-2-0.dll
        • Size 22KB
        • SHA256 f6482bbec5612c39ecb4822787a333f2b7570f7a5f922a4059be41ba957bb372
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 22KB
        • SHA256 272d02765fdd3582618236c2d309abba069642f9bc1062ede069d0c144e17007
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-sysinfo-l1-2-0.dll
        • Size 22KB
        • SHA256 8a0900788859d0eb51c2f48f50cc6ed376a120b518100fa20e11d7702ccde260
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-timezone-l1-1-0.dll
        • Size 22KB
        • SHA256 ff35de6c03812b332e140f17dade25c5dd4775156da9eeb1eaae3fddd27236ec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-core-util-l1-1-0.dll
        • Size 22KB
        • SHA256 191ef3e98641a57296f19d572d8eb62489470ff1ef6030d136af170c2f835173
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-crt-conio-l1-1-0.dll
        • Size 22KB
        • SHA256 54ee5ec719a051496ff60aa00dbeaa94b9a7d2cdac27fe9b7317f1a666b6a2aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-crt-convert-l1-1-0.dll
        • Size 26KB
        • SHA256 8b94662429171019fcd63c70bbf2095a075170599704a5e7dcdbe3da13f3a429
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-crt-environment-l1-1-0.dll
        • Size 22KB
        • SHA256 39e5929593709e8af3bc9e0a75ec1155778d6f4a247f4cdfc58928ad6db88434
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 22KB
        • SHA256 5a8ecebac32edf4e1f3c5c6c1c8ea1a1add6cda4f9c9cb26f752fb295bea6865
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-crt-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 c71080cbcb43bf1f8f3e391deb12a582eb0abefc80946f340675a2c616e4feb4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-crt-locale-l1-1-0.dll
        • Size 22KB
        • SHA256 6c68648e524187e03c4ad9aaa4a99113c6ee9f29fb39cc0ed93f951975138e63
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-crt-math-l1-1-0.dll
        • Size 30KB
        • SHA256 d4fbcccbe29371cbce431e43b2eb4f7ba9a6f04a3d740a071f02457a505e9dc8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-crt-process-l1-1-0.dll
        • Size 22KB
        • SHA256 47c1935942e3ac0812e4dcf18c0e265e565f0194a3349111c299712f5565f7ac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 26KB
        • SHA256 72adc1b3677e0814d9c4ebf0964000e84bb2acf67336c8963061665e44f78029
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 26KB
        • SHA256 900afc3989673c9bb1a687ed38c192f46db9e6ba6d11a668898a539e7fc23798
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-crt-string-l1-1-0.dll
        • Size 26KB
        • SHA256 fcf12466cc12fd3b73611fc0763a5a1f9d44e90349513c34a0c83b0f36421793
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-crt-time-l1-1-0.dll
        • Size 22KB
        • SHA256 886e57c4a6adb299b38f02945369f590a67da4e79a798359fc60aaa067212d7c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\api-ms-win-crt-utility-l1-1-0.dll
        • Size 22KB
        • SHA256 5f8f26b216ade615b67a41f6fbbb910972fc6153315a65bb8f09912be50215b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\base_library.zip
        • Size 1.3MB
        • SHA256 1a1a31fbb3788a2297381cfcbf3e8b6fba4bbad52ac6de18a0277dc789edc81d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-3-x64.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\libcrypto-3-x64.dll
        • Size 5.5MB
        • SHA256 ef8dc7e412a064e8bdc9243f8b71dcece44d837794047a69f80b491df8ed25e6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python312.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\python312.dll
        • Size 7.1MB
        • SHA256 7a5bc067adb9141a105e612c30506af9033a8ac4ce9069c5658b058dfcae5320
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\select.pyd
        • Size 19KB
        • SHA256 fdad72f8f912b9810e73471d49dc6b8f89017dc5549aeb22e107555e2204a4b6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tcl86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\tcl86t.dll
        • Size 1.7MB
        • SHA256 0c172d8c3cfb524d87484d1b771cf0ba7204d7204e76ef133efad5bd92898f7f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tk86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\tk86t.dll
        • Size 1.5MB
        • SHA256 4de6f07eb78557497a43089a9adff4f7d478db8560f0cde7b2fa3b4510df2468
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\ucrtbase.dll
        • Size 1.3MB
        • SHA256 3239227d27667ba20d10a880751924e5719de0078f9fce232d149d383f7681f6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\unicodedata.pyd
        • Size 1.1MB
        • SHA256 a82ebe1216a31a03aa377a04e25771cc2ddecea2cc412f0021f62b0a7ee12ab7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zlib.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\zlib.dll
        • Size 88KB
        • SHA256 85c711c83f96bed93184bede15be6b5a3e5444df09dfffef00564107189dc722
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zlib1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI12922\zlib1.dll
        • Size 125KB
        • SHA256 93e9243a44c29200eeacaf9658efe2558581770e4b11ca4b500e18e424a6e3b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/5004-1041-0x00007FF9F3F30000-0x00007FF9F3F56000-memory.dmp