General
- Target 2026-10-22_736438d032d5724a5c7e19fd8eb08e1e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 21.7MB
- Sample261024-knfdkagy6t
- SHA256 a7a5f79ddef870766d4bb8ebe9e6ebcba9014836f13794960676c2893661063b
- MD5 736438d032d5724a5c7e19fd8eb08e1e
- SHA1 423b28b3c7dc4657ed3f004c254639050fa37d4d
- SHA512 09f7820309313886e19febe15b6876264bd31d71570c8c83db7c4d39c8f9dbf860e3cb0e1f5d637478db893f05ebe61218d96eb5cbd27abe77982ccce971c736
- SSDEEP 393216:7eFQW8NLoauCiUuCGtG4VDtHRg1nyD3daDr9j6oofL7kfXBhHTodRGkXT9v9Aaxb:dW8N0CO5w4DHR2ny4P9jy80LhXdiaxe
- TLSH T1F8373396B3C94CE4FD5A7238A9C21A1A63F678154720C1E34FD44E922D670E8FFB1726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-10-22_736438d032d5724a5c7e19fd8eb08e1e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_736438d032d5724a5c7e19fd8eb08e1e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_736438d032d5724a5c7e19fd8eb08e1e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 21.7MB
- SHA256 a7a5f79ddef870766d4bb8ebe9e6ebcba9014836f13794960676c2893661063b
- MD5 736438d032d5724a5c7e19fd8eb08e1e
- SHA1 423b28b3c7dc4657ed3f004c254639050fa37d4d
- SHA512 09f7820309313886e19febe15b6876264bd31d71570c8c83db7c4d39c8f9dbf860e3cb0e1f5d637478db893f05ebe61218d96eb5cbd27abe77982ccce971c736
- SSDEEP 393216:7eFQW8NLoauCiUuCGtG4VDtHRg1nyD3daDr9j6oofL7kfXBhHTodRGkXT9v9Aaxb:dW8N0CO5w4DHR2ny4P9jy80LhXdiaxe
- TLSH T1F8373396B3C94CE4FD5A7238A9C21A1A63F678154720C1E34FD44E922D670E8FFB1726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1