General
- Target 2026-09-21_cce77f1591e9e727edf5cddb1648c470_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 12.8MB
- Sample260922-l5bmdavy3q
- SHA256 9cfa7032fe3bfee24032f542f3b365573f227c9443bb4ca625717d9acedb380f
- MD5 cce77f1591e9e727edf5cddb1648c470
- SHA1 4042f2f7cef48f85097de3c6a21c6afa518369e1
- SHA512 acf56662fdadd21ea8eb16f87bb340bbfbf031aa279c3128e8fa12ec5b49b319861a2c4c78db16d60fdb6806e50733beee664f24c02e949a6d0e17ac932b2b2f
- SSDEEP 393216:QlCSsgizNZxlHOFpL2Vmd6mp0GzajTfrSTd0dKV3Q9fRaYtwq+:QizNB0yVmdbET250dTs8wN
- TLSH T1DFD6335DFB5004B3F2678436D9A78126DAB2BEE54BA081CF43A8C1053F17AE06D76F61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-09-21_cce77f1591e9e727edf5cddb1648c470_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-21_cce77f1591e9e727edf5cddb1648c470_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 12.8MB
- SHA256 9cfa7032fe3bfee24032f542f3b365573f227c9443bb4ca625717d9acedb380f
- MD5 cce77f1591e9e727edf5cddb1648c470
- SHA1 4042f2f7cef48f85097de3c6a21c6afa518369e1
- SHA512 acf56662fdadd21ea8eb16f87bb340bbfbf031aa279c3128e8fa12ec5b49b319861a2c4c78db16d60fdb6806e50733beee664f24c02e949a6d0e17ac932b2b2f
- SSDEEP 393216:QlCSsgizNZxlHOFpL2Vmd6mp0GzajTfrSTd0dKV3Q9fRaYtwq+:QizNB0yVmdbET250dTs8wN
- TLSH T1DFD6335DFB5004B3F2678436D9A78126DAB2BEE54BA081CF43A8C1053F17AE06D76F61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.