General
- Target 2026-10-22_249fc47cf9f209df821edd76afffbf19_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 22.0MB
- Sample261024-xmt7js1t6m
- SHA256 fa791f9eac4239d74f70faa6b93ce689982c64eaa19b26ef66d7b22dad70d6a8
- MD5 249fc47cf9f209df821edd76afffbf19
- SHA1 35d30971bfe169ac1e894a24dcc25cabae2e2f72
- SHA512 9cf4aa71b2df9e2deaae3f06ff83d7dc6ffad6126e567567d09739103f7ace18a098243a7e225521f90552560224fbe97c43631abef6bbee2c7721641b1acdcb
- SSDEEP 393216:9of/B180i8nmcZjI4Yoyb+jSaVoU9n7IQSSm+NHXDQhtpd9/kb87dDp:9IA0i8nmMYoysX8SmWXchQbUv
- TLSH T19F3733D8735159EFF1DB9234DAE7D429BEF2340917A289DF08784A23291B1E2387E750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
2026-10-22_249fc47cf9f209df821edd76afffbf19_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_249fc47cf9f209df821edd76afffbf19_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_249fc47cf9f209df821edd76afffbf19_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 22.0MB
- SHA256 fa791f9eac4239d74f70faa6b93ce689982c64eaa19b26ef66d7b22dad70d6a8
- MD5 249fc47cf9f209df821edd76afffbf19
- SHA1 35d30971bfe169ac1e894a24dcc25cabae2e2f72
- SHA512 9cf4aa71b2df9e2deaae3f06ff83d7dc6ffad6126e567567d09739103f7ace18a098243a7e225521f90552560224fbe97c43631abef6bbee2c7721641b1acdcb
- SSDEEP 393216:9of/B180i8nmcZjI4Yoyb+jSaVoU9n7IQSSm+NHXDQhtpd9/kb87dDp:9IA0i8nmMYoysX8SmWXchQbUv
- TLSH T19F3733D8735159EFF1DB9234DAE7D429BEF2340917A289DF08784A23291B1E2387E750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.