General
- Target 2026-10-10_c70176ae72300d54621e8bf59bd18e95_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 20.3MB
- Sample261011-c77cdsc13n
- SHA256 a7838ad6cbe54af0abc9ee68bd6010f863b17b43e19b84f75edb907f062262d2
- MD5 c70176ae72300d54621e8bf59bd18e95
- SHA1 e2246379fad07659b91a6d9f75e705f4ede734c3
- SHA512 796fd5fd0d9beee657c5265cc65c7959ee80bea1e737b9d2fd017f0ba1a8b11d326b141a0b56ba1523691278d27bba0a595740c536f448ac020a906735dc0c07
- SSDEEP 393216:4lNIZ37UJ32eivEoxy8eeQltpXEAphVtM510MjZBW7IOtGjmFgodjPRv/rHSb:4bS4ce2s7ey/RphW10MzW0O4jEgod5vC
- TLSH T1CD27335CB66060FFECE5813A8EA99866E3F331834B6441DF13B005662E676F46D3C762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-10-10_c70176ae72300d54621e8bf59bd18e95_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-10_c70176ae72300d54621e8bf59bd18e95_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_c70176ae72300d54621e8bf59bd18e95_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 20.3MB
- SHA256 a7838ad6cbe54af0abc9ee68bd6010f863b17b43e19b84f75edb907f062262d2
- MD5 c70176ae72300d54621e8bf59bd18e95
- SHA1 e2246379fad07659b91a6d9f75e705f4ede734c3
- SHA512 796fd5fd0d9beee657c5265cc65c7959ee80bea1e737b9d2fd017f0ba1a8b11d326b141a0b56ba1523691278d27bba0a595740c536f448ac020a906735dc0c07
- SSDEEP 393216:4lNIZ37UJ32eivEoxy8eeQltpXEAphVtM510MjZBW7IOtGjmFgodjPRv/rHSb:4bS4ce2s7ey/RphW10MzW0O4jEgod5vC
- TLSH T1CD27335CB66060FFECE5813A8EA99866E3F331834B6441DF13B005662E676F46D3C762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.