General
- Target 2026-09-16_9bc9f730f8e9ed4b8f0aea189108371b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_poet-rat_ryuk
- Size 37.9MB
- Sample260916-xjsvbasyfx
- SHA256 05d1651bb0e2fc5a071ac347c988a2385fc725d9eaa4f527189f0afdf59e0d40
- MD5 9bc9f730f8e9ed4b8f0aea189108371b
- SHA1 7a480264a970c4ee5d30c9ed315b12368989c114
- SHA512 cbdadf5ccb52d4d7f6f520002bee67b52b2e49c7cc675b7e7ca746ac8e0d188c5242fc61e9cd6b5537d90e109cc28339c1751507a5a66195e043033e671fefd4
- SSDEEP 393216:lgB3c2xFi3Iskv+tlx64SNAKFdu9CwJsv6ttvsQP4kd7Voh:UN5gls4SKkQP4kd7Vo
- TLSH T118977B1762F501C5E1BBC138CBB68123EB71788517749ADF225462692F33BF06E7A326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_9bc9f730f8e9ed4b8f0aea189108371b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_poet-rat_ryuk.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_9bc9f730f8e9ed4b8f0aea189108371b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_poet-rat_ryuk.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_9bc9f730f8e9ed4b8f0aea189108371b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_poet-rat_ryuk
- Size 37.9MB
- SHA256 05d1651bb0e2fc5a071ac347c988a2385fc725d9eaa4f527189f0afdf59e0d40
- MD5 9bc9f730f8e9ed4b8f0aea189108371b
- SHA1 7a480264a970c4ee5d30c9ed315b12368989c114
- SHA512 cbdadf5ccb52d4d7f6f520002bee67b52b2e49c7cc675b7e7ca746ac8e0d188c5242fc61e9cd6b5537d90e109cc28339c1751507a5a66195e043033e671fefd4
- SSDEEP 393216:lgB3c2xFi3Iskv+tlx64SNAKFdu9CwJsv6ttvsQP4kd7Voh:UN5gls4SKkQP4kd7Vo
- TLSH T118977B1762F501C5E1BBC138CBB68123EB71788517749ADF225462692F33BF06E7A326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE