General
- Target 2026-10-28_0a1c4f30b8089e8b85635c9a376901c1_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 33.7MB
- Sample261030-mwes4sec43
- SHA256 fefe1efca2043e21129f475d3f22dc9993bf148143f4f51bebeb25978b865936
- MD5 0a1c4f30b8089e8b85635c9a376901c1
- SHA1 4084ad870d79b1597a7a6a7df490cd3310a98874
- SHA512 c7261ec784ad4b821780860d35666f9962b4933c0d97bf212ca8d0a1045d75c78cbc14aeccac5c0fc2f8b51975f122aa6cae7d3a99dc808afceacdd6348f0e77
- SSDEEP 786432:m5vzUSX21nbhVEHCYFq7u6fa7KZHW+e5RH0fkhanHTvPu3NUkq9MmUtqJiaMh:m9zm1buAa7KZHW+eHHFmHTvaRtEg
- TLSH T11F7733A0A2DC49F0D8F04A7F45670542AF36FC7A2B34C9DF8A34E3561D971C6887E968
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-10-28_0a1c4f30b8089e8b85635c9a376901c1_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_0a1c4f30b8089e8b85635c9a376901c1_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_0a1c4f30b8089e8b85635c9a376901c1_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 33.7MB
- SHA256 fefe1efca2043e21129f475d3f22dc9993bf148143f4f51bebeb25978b865936
- MD5 0a1c4f30b8089e8b85635c9a376901c1
- SHA1 4084ad870d79b1597a7a6a7df490cd3310a98874
- SHA512 c7261ec784ad4b821780860d35666f9962b4933c0d97bf212ca8d0a1045d75c78cbc14aeccac5c0fc2f8b51975f122aa6cae7d3a99dc808afceacdd6348f0e77
- SSDEEP 786432:m5vzUSX21nbhVEHCYFq7u6fa7KZHW+e5RH0fkhanHTvPu3NUkq9MmUtqJiaMh:m9zm1buAa7KZHW+eHHFmHTvaRtEg
- TLSH T11F7733A0A2DC49F0D8F04A7F45670542AF36FC7A2B34C9DF8A34E3561D971C6887E968
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.