General
- Target 2026-10-01_498543d76a371664585da5265c8fb0e0_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 13.4MB
- Sample261002-ssftwsvx5r
- SHA256 dc76f67d1632c7b457445ff4bf1e2213d50ec12b7add74eb7e6644c0a180537a
- MD5 498543d76a371664585da5265c8fb0e0
- SHA1 ca7b84985ca6e38923497f8b8f1ef5846e1fe6fd
- SHA512 ee0eeed0b253400781d56ecaa6b7868e91e58178806432f01a5e40c5c75ca7d9920c4475eac1e745197aa70fad781ce12b6fe57567a8da739c35e3f5361f5af9
- SSDEEP 393216:hXoILNVuL7f1iOPsZg2KeMK4vHsMlaSqWbYUH:dhb61irLXwrUSdb
- TLSH T1D4E633AE97E149AAD877693F5AB85062D3B2B4314B61CCDF0B50821B3F871F91C3A351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-10-01_498543d76a371664585da5265c8fb0e0_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_498543d76a371664585da5265c8fb0e0_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_498543d76a371664585da5265c8fb0e0_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 13.4MB
- SHA256 dc76f67d1632c7b457445ff4bf1e2213d50ec12b7add74eb7e6644c0a180537a
- MD5 498543d76a371664585da5265c8fb0e0
- SHA1 ca7b84985ca6e38923497f8b8f1ef5846e1fe6fd
- SHA512 ee0eeed0b253400781d56ecaa6b7868e91e58178806432f01a5e40c5c75ca7d9920c4475eac1e745197aa70fad781ce12b6fe57567a8da739c35e3f5361f5af9
- SSDEEP 393216:hXoILNVuL7f1iOPsZg2KeMK4vHsMlaSqWbYUH:dhb61irLXwrUSdb
- TLSH T1D4E633AE97E149AAD877693F5AB85062D3B2B4314B61CCDF0B50821B3F871F91C3A351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.