Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/10/2026, 18:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
- Size 1.4MB
- Sample261023-w9ppxadd62
- SHA256 c4607b001a9861a1e76a1999015cd88edbb4482515687418a03042ba5ea59474
- MD5 d55212140bd68b4443672dcba3101e41
- SHA1 94c5c29d810f0f59d79ffaec2cbfc987d0c12da9
- SHA512 3d961de63bc038871096d05f906484e80f1e2265928adaef0dc74bc67e8843f3cc23c8e353e2df51909ffef0dc71ea074454ceb4f56de0a0931754485589e95f
- SSDEEP 24576:2ex1bHCJZ8EHo7IavHSCQ1eEJeCm35VVhzYcy948QIO3aWzD2uGKv9zolFCD:2MiJZ8EQvtEJeCm35VVh5y94UO3xyu9Z
- TLSH T15465AE5BA7A401E9C1B7D278CA578607DBB274490330AADF03E186661F23BE15F3E752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1052 2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-22_d55212140bd68b4443672dcba3101e41_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:1052