Analysis
- max time kernel
148s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/10/2026, 16:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-21_973d7924e1313cbd554e059854bfe337_blankgrabber_cobalt-strike_glassworm_icedid_njrat_poet-rat_satacom_stealc.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_973d7924e1313cbd554e059854bfe337_blankgrabber_cobalt-strike_glassworm_icedid_njrat_poet-rat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-21_973d7924e1313cbd554e059854bfe337_blankgrabber_cobalt-strike_glassworm_icedid_njrat_poet-rat_satacom_stealc.exe
- Size 8.3MB
- Sample261022-txbamsstcy
- SHA256 c9002f9a2f0069cb3fa7c5c7945faff96a966601142413b3f52e3b7d5f302be4
- MD5 973d7924e1313cbd554e059854bfe337
- SHA1 9546e93c58d5e468c54cc2ade12e365554c231b0
- SHA512 6305ab643c44bb3e186469b59e16777a5d2971d77447e226b1fab56cf1fc276330fa18c4c40323edc1305dd8a870a476feba54b65568aad7ec6fc0c62376db44
- SSDEEP 98304:xF6IqcKU5J7hpegGScFGlKAIcSZi4xCZ+M:xU3GJegGScFJcUM
- TLSH T10A968E1A62E501E8E177C1BCCA5B9903E77338560731E7DB01A0862B9F17AE64E7E731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1072 2026-10-21_973d7924e1313cbd554e059854bfe337_blankgrabber_cobalt-strike_glassworm_icedid_njrat_poet-rat_satacom_stealc.exe 1072 2026-10-21_973d7924e1313cbd554e059854bfe337_blankgrabber_cobalt-strike_glassworm_icedid_njrat_poet-rat_satacom_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-21_973d7924e1313cbd554e059854bfe337_blankgrabber_cobalt-strike_glassworm_icedid_njrat_poet-rat_satacom_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-21_973d7924e1313cbd554e059854bfe337_blankgrabber_cobalt-strike_glassworm_icedid_njrat_poet-rat_satacom_stealc.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:1072
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\wxiss-{F6970BEE-649B-4C89-9BFB-760B035A8754}\editor 日本語.iss
- Size 148B
- SHA256 fff3280b0924c7997225b9b93f28deac752e75c8f0fad4a20e48a8d039b1e646
- MD5 79989246e9f1de8c098a339f119896a5
- SHA1 b576c022872875ec531f5bbe2626858bfc595ac3
- SHA512 9c40a74d9bcbfc9492a1fedbf23113d7ecf9e531abb1d53021cfc409b4c5c54989ed0b93c5661ce6e44bfaed91afd1b4b463300b3d5ab5bf12b39e592f36499e
- TLSH T11BC08C8CC7AC6F1C228442CB049861C54AA08E3C02CC0818CB5012E51AC2106614D770
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\wxiss-{F6970BEE-649B-4C89-9BFB-760B035A8754}\editor 日本語.iss
- Size 142B
- SHA256 c757454b47da3322fc30cd428293b738dc6197f5f0763c5a35b5f40a15e05d53
- MD5 0302f1520d36c6de93bb287c08e9ca34
- SHA1 1053e96969252bca3b5888e6c22512feab6204ca
- SHA512 89b47e5a5b8de0d723de40c203f5abb7c68d42a916582df86fb9a83e215bb966ef77f2f8596d3513a00955b4ec8ee5921a962177403ea57a97ab722e157888c7
- TLSH T16AC09B09D7AC5E1F52D543C7599461CA8AD48E3D02DC1D1CC71116E60E92116A14D770
- MD5 SHA1 SHA512 TLSH