General
- Target 2026-09-29_5ae3996e77d86f4a0ca7277cc5622b9d_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 23.8MB
- Sample260930-ameqjasfle
- SHA256 02f9af8e8184d5624c82d5a3aa6077918f763d47ecb5dbbe685aa0ea3a2ce624
- MD5 5ae3996e77d86f4a0ca7277cc5622b9d
- SHA1 0199c168178898cf66769e1f05b371c9a4cf2d53
- SHA512 66f334d0733afc9d4a606bd32dc4281a76ad93785ef386007530aaf83c2e063bc513e5b92d3da456a5152171e72d2e349ae90d4512214da60e03d8f37f50216c
- SSDEEP 393216:v85vzN4pLRolGjcOoqy5Xd/+zkyhD6LCon+mIHjnO58mnGCnGjmZMwBWv0haxiRw:05vzWpLRvjXoRldWzkCD6nnZIHLOSmnc
- TLSH T1824733561AC118EBF8C24A34499F4835E66AFD5217B2E1CF1AB149B01F232D13D7EF26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-29_5ae3996e77d86f4a0ca7277cc5622b9d_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_5ae3996e77d86f4a0ca7277cc5622b9d_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_5ae3996e77d86f4a0ca7277cc5622b9d_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 23.8MB
- SHA256 02f9af8e8184d5624c82d5a3aa6077918f763d47ecb5dbbe685aa0ea3a2ce624
- MD5 5ae3996e77d86f4a0ca7277cc5622b9d
- SHA1 0199c168178898cf66769e1f05b371c9a4cf2d53
- SHA512 66f334d0733afc9d4a606bd32dc4281a76ad93785ef386007530aaf83c2e063bc513e5b92d3da456a5152171e72d2e349ae90d4512214da60e03d8f37f50216c
- SSDEEP 393216:v85vzN4pLRolGjcOoqy5Xd/+zkyhD6LCon+mIHjnO58mnGCnGjmZMwBWv0haxiRw:05vzWpLRvjXoRldWzkCD6nnZIHLOSmnc
- TLSH T1824733561AC118EBF8C24A34499F4835E66AFD5217B2E1CF1AB149B01F232D13D7EF26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.