General
- Target 2026-09-24_7a1b0934c1698124654e9b5ffb6f7739_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 20.6MB
- Sample260925-hhfe9sbe23
- SHA256 90347694f9d322436e438c4e2b935b137d20e3a3e7bd917db312c087ddf06371
- MD5 7a1b0934c1698124654e9b5ffb6f7739
- SHA1 cd18e97dbb1b9d072dbbcd66ea219de62f6f12e0
- SHA512 bc82a05b249832d4ced78e9f6710b8f91415d8e086ebca58876752f3cb70b741f76ed9e2d97736c14417c77353bc978c966b0e1cb9ea2fe674a3f675ac131468
- SSDEEP 393216:rZ2aoEeJ0LohVEHCYFqAOyW8CtyoQuC8hHTodRGkX0ydU9v9X9qfkh/fRmJLqbmu:t21nbhVEHCYFqcW8u99C+0LhX0cQz4gh
- TLSH T1692733A6B7CA00E4F59A9234458107C523E2389A572099EB4FED4C932D775E8BF317E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-09-24_7a1b0934c1698124654e9b5ffb6f7739_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_7a1b0934c1698124654e9b5ffb6f7739_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_7a1b0934c1698124654e9b5ffb6f7739_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 20.6MB
- SHA256 90347694f9d322436e438c4e2b935b137d20e3a3e7bd917db312c087ddf06371
- MD5 7a1b0934c1698124654e9b5ffb6f7739
- SHA1 cd18e97dbb1b9d072dbbcd66ea219de62f6f12e0
- SHA512 bc82a05b249832d4ced78e9f6710b8f91415d8e086ebca58876752f3cb70b741f76ed9e2d97736c14417c77353bc978c966b0e1cb9ea2fe674a3f675ac131468
- SSDEEP 393216:rZ2aoEeJ0LohVEHCYFqAOyW8CtyoQuC8hHTodRGkX0ydU9v9X9qfkh/fRmJLqbmu:t21nbhVEHCYFqcW8u99C+0LhX0cQz4gh
- TLSH T1692733A6B7CA00E4F59A9234458107C523E2389A572099EB4FED4C932D775E8BF317E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.