General
- Target 2026-09-24_3190cd0ca477171e13d5d6f1f939058a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 18.7MB
- Sample260925-pnlmsswcla
- SHA256 582c1ac8642d953f04cd87d42f2ee07ac358267377f6924fce98b01d2c10ae2a
- MD5 3190cd0ca477171e13d5d6f1f939058a
- SHA1 d7cb64e093def66d028a611a52847f90558be79c
- SHA512 28ace3b4031aa7c57c9ce12c4a12fde1effbf2074ead83c28e8a155a23627e562718f39bd6eefba560b38cf612bf4cf112d8361a83767b891724abe4e885ba16
- SSDEEP 393216:AqQ4P9OZHzRjl1BLZSTMx3BXEAphVtp510Mjde65MKajF2CvUr5Cxb:AqQ4IZHlBZb7RphP10MZeKajFrvUr5CF
- TLSH T19117331CBBA051FAE5E5413C54B19852E1F272A31FE1E3EF22E412563EBB9E41D3C690
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-09-24_3190cd0ca477171e13d5d6f1f939058a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_3190cd0ca477171e13d5d6f1f939058a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 18.7MB
- SHA256 582c1ac8642d953f04cd87d42f2ee07ac358267377f6924fce98b01d2c10ae2a
- MD5 3190cd0ca477171e13d5d6f1f939058a
- SHA1 d7cb64e093def66d028a611a52847f90558be79c
- SHA512 28ace3b4031aa7c57c9ce12c4a12fde1effbf2074ead83c28e8a155a23627e562718f39bd6eefba560b38cf612bf4cf112d8361a83767b891724abe4e885ba16
- SSDEEP 393216:AqQ4P9OZHzRjl1BLZSTMx3BXEAphVtp510Mjde65MKajF2CvUr5Cxb:AqQ4IZHlBZb7RphP10MZeKajFrvUr5CF
- TLSH T19117331CBBA051FAE5E5413C54B19852E1F272A31FE1E3EF22E412563EBB9E41D3C690
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.