General
- Target 2026-09-10_9ef4c0108769f7cb92a906b6ebd70aa7_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 5.4MB
- Sample260910-p5p2jstepb
- SHA256 28c708c285006d7661dc48594e70524e8dc37cba0f9dabbb48d0e52405403a3b
- MD5 9ef4c0108769f7cb92a906b6ebd70aa7
- SHA1 7476fd1ab1a297ed9c95f0f457427ba970280cb7
- SHA512 d7d846a916686251291feed01f755d0efb3febe541ba4d0b6368229470dfe6d49910b65efd1b30e667621a8b9ecdaa4ccdd5e63254ff2e1137a4fc35aa232f46
- SSDEEP 98304:7+wgtlICDtPfeE/jowqK5LN1KQ0oTh2M9QrABlolllSHRMfM66y:ElICteErownP0oTcMsABqlrX6
- TLSH T19D463308B3A809E1EAB3D13D85665221D972B4254BB0D5CF43AC97262F777D0AF3BB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-10_9ef4c0108769f7cb92a906b6ebd70aa7_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
8 signatures
900 seconds
Malware Config
Targets
-
- Target 2026-09-10_9ef4c0108769f7cb92a906b6ebd70aa7_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 5.4MB
- SHA256 28c708c285006d7661dc48594e70524e8dc37cba0f9dabbb48d0e52405403a3b
- MD5 9ef4c0108769f7cb92a906b6ebd70aa7
- SHA1 7476fd1ab1a297ed9c95f0f457427ba970280cb7
- SHA512 d7d846a916686251291feed01f755d0efb3febe541ba4d0b6368229470dfe6d49910b65efd1b30e667621a8b9ecdaa4ccdd5e63254ff2e1137a4fc35aa232f46
- SSDEEP 98304:7+wgtlICDtPfeE/jowqK5LN1KQ0oTh2M9QrABlolllSHRMfM66y:ElICteErownP0oTcMsABqlrX6
- TLSH T19D463308B3A809E1EAB3D13D85665221D972B4254BB0D5CF43AC97262F777D0AF3BB50
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Hide Artifacts: Hidden Files and Directories