General
- Target 2026-09-30_46e9f925599b22f8c077f5ed19a5e5c4_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 884KB
- Sample261001-sl3p3sty5m
- SHA256 c78217d529721a9dada0e92b6b1b3c212b1d67bce5593d2408054a483e5d9a62
- MD5 46e9f925599b22f8c077f5ed19a5e5c4
- SHA1 2b0d335e7cdf0e5c63bf0bb62ecc4dfa33aec39f
- SHA512 976109e92f432b0a0831ea295cb046f1c3a04b12edd4d5d1c0237e87f0ed6b76e2e9c864a73036d3bed9563c213a27021c70d6048d36c2f045304a67a7e1c640
- SSDEEP 12288:U4RbIzhC8ay677u8I4Bpyyl6MOqI3DizBsHgfoZLhYDXAn6LpD/9W1qkfnj2vpfj:J0Ay6XTHyyADizpoLn6LpDcU+j29
- TLSH T17B156D16E66400BDD0B7C6B4CE665D43D772B84B0331AADB03D06AA63F277E45A3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-30_46e9f925599b22f8c077f5ed19a5e5c4_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
blakcsee_stealer
C2
-
91.210.146.50
Targets
-
- Target 2026-09-30_46e9f925599b22f8c077f5ed19a5e5c4_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 884KB
- SHA256 c78217d529721a9dada0e92b6b1b3c212b1d67bce5593d2408054a483e5d9a62
- MD5 46e9f925599b22f8c077f5ed19a5e5c4
- SHA1 2b0d335e7cdf0e5c63bf0bb62ecc4dfa33aec39f
- SHA512 976109e92f432b0a0831ea295cb046f1c3a04b12edd4d5d1c0237e87f0ed6b76e2e9c864a73036d3bed9563c213a27021c70d6048d36c2f045304a67a7e1c640
- SSDEEP 12288:U4RbIzhC8ay677u8I4Bpyyl6MOqI3DizBsHgfoZLhYDXAn6LpD/9W1qkfnj2vpfj:J0Ay6XTHyyADizpoLn6LpDcU+j29
- TLSH T17B156D16E66400BDD0B7C6B4CE665D43D772B84B0331AADB03D06AA63F277E45A3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1