General
- Target 2026-10-22_f5b60506c0424abdcc198aa010a3bbdc_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 14.2MB
- Sample261023-cfbfmsg181
- SHA256 4c70888f03733423178c0908561640569c3e4d6ebc96effe7fcc9b8bf4ac9c21
- MD5 f5b60506c0424abdcc198aa010a3bbdc
- SHA1 1277fdeeb6700b2e9ea51ba29f52dabc715b57d4
- SHA512 48cfc124c45fc761b61036d3c7e09f0502d80b70b91535134cabfa35d9a8aa048498e82698af8acf67eb674be594977ee77a00d4b2bd441219e44f7a3dddd2c7
- SSDEEP 393216:nNU0GuCuhHTodRGkX57Yx4rBN8uqAkZArd2QX:6mCQ0LhX5m4Bzk+9
- TLSH T184E6336AF2E145F5F8EBA63CCB438654B77A74001760E2EF02E586707DB71A81A31763
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-22_f5b60506c0424abdcc198aa010a3bbdc_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_f5b60506c0424abdcc198aa010a3bbdc_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_f5b60506c0424abdcc198aa010a3bbdc_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 14.2MB
- SHA256 4c70888f03733423178c0908561640569c3e4d6ebc96effe7fcc9b8bf4ac9c21
- MD5 f5b60506c0424abdcc198aa010a3bbdc
- SHA1 1277fdeeb6700b2e9ea51ba29f52dabc715b57d4
- SHA512 48cfc124c45fc761b61036d3c7e09f0502d80b70b91535134cabfa35d9a8aa048498e82698af8acf67eb674be594977ee77a00d4b2bd441219e44f7a3dddd2c7
- SSDEEP 393216:nNU0GuCuhHTodRGkX57Yx4rBN8uqAkZArd2QX:6mCQ0LhX5m4Bzk+9
- TLSH T184E6336AF2E145F5F8EBA63CCB438654B77A74001760E2EF02E586707DB71A81A31763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Executes a VBScript file via the Windows Script Host.