General

  • Target
    2026-10-16_fbaf8940af042a2f244b547c8127486e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
  • Size 14.5MB
  • Sample261017-b1jgbazx4l
  • SHA256 21467f51844c4254f6a87174bca17681ba6f303c188197b846377b797f500b3c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-10-16_fbaf8940af042a2f244b547c8127486e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
    • Size 14.5MB
    • SHA256 21467f51844c4254f6a87174bca17681ba6f303c188197b846377b797f500b3c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Loads dropped DLL

    • Checks whether UAC is enabled

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Network Share Discovery

      Attempt to gather information on host network.

MITRE ATT&CK Enterprise v16

Tasks