General
- Target 2026-09-23_af63d213f7284098e62adf6cc62b8e5a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 83.0MB
- Sample260924-cvs91ayaja
- SHA256 663ec77cb8887e069c41b8913adf616645c7bb2108dad79ef00cbbc15b8b84ea
- MD5 af63d213f7284098e62adf6cc62b8e5a
- SHA1 1a2a9a90ba0bf22618de173fdb5d72363e8786d8
- SHA512 04db959f6af1f1ae37f382a12b8fbf101846afad38e71278d910f10e1a1c10b89ba668b7676b571425372aafea0a74c5a104e6624dc4f160ed7051d408509c4a
- SSDEEP 1572864:A9zNvUMOtlWjYuHKO+dy2J0f0/rBdsG7bpip0WWPiIhK4cNPZuFECSVd:A9VUX7UVHI5BB7tE0Wmo4ch8FE3
- TLSH T11618331A995665AFE2095332A2D5C43A3FE3664BCB9AC0CC2BD04D435BA70CDCD79C63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-09-23_af63d213f7284098e62adf6cc62b8e5a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-23_af63d213f7284098e62adf6cc62b8e5a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 83.0MB
- SHA256 663ec77cb8887e069c41b8913adf616645c7bb2108dad79ef00cbbc15b8b84ea
- MD5 af63d213f7284098e62adf6cc62b8e5a
- SHA1 1a2a9a90ba0bf22618de173fdb5d72363e8786d8
- SHA512 04db959f6af1f1ae37f382a12b8fbf101846afad38e71278d910f10e1a1c10b89ba668b7676b571425372aafea0a74c5a104e6624dc4f160ed7051d408509c4a
- SSDEEP 1572864:A9zNvUMOtlWjYuHKO+dy2J0f0/rBdsG7bpip0WWPiIhK4cNPZuFECSVd:A9VUX7UVHI5BB7tE0Wmo4ch8FE3
- TLSH T11618331A995665AFE2095332A2D5C43A3FE3664BCB9AC0CC2BD04D435BA70CDCD79C63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.