General
- Target 2026-11-02_e54859ddc00f7cf5ded00dd8f9de1e1b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 9.8MB
- Sample261102-ym2gasgc22
- SHA256 e5ad9c51968eaab75cff88f4804cae53d833523c9b11ecce7b43ed6f15d2e7a7
- MD5 e54859ddc00f7cf5ded00dd8f9de1e1b
- SHA1 9e1e9899ae8f2af36c7be8725f6c9889dff2963e
- SHA512 3c7ca94911639a740d1c487255c9e97380386f0125178f6df6fea5f8f8a062945dd133b35478f84cb6d4af0a9788112d0dc3244193a73dc3203ab6e9dddbe098
- SSDEEP 196608:Gd2MjndwWA1HeT39IigwqtauDXURuAEfCZEpUxshSkeS:GXQ1+TtIiFq8uARuAiCZEpUmhZeS
- TLSH T13DA633A9E3B201B5F9E2913EC2B6C14ED571745A87B5D3DF039006127F2BBE24939B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-11-02_e54859ddc00f7cf5ded00dd8f9de1e1b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_e54859ddc00f7cf5ded00dd8f9de1e1b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 9.8MB
- SHA256 e5ad9c51968eaab75cff88f4804cae53d833523c9b11ecce7b43ed6f15d2e7a7
- MD5 e54859ddc00f7cf5ded00dd8f9de1e1b
- SHA1 9e1e9899ae8f2af36c7be8725f6c9889dff2963e
- SHA512 3c7ca94911639a740d1c487255c9e97380386f0125178f6df6fea5f8f8a062945dd133b35478f84cb6d4af0a9788112d0dc3244193a73dc3203ab6e9dddbe098
- SSDEEP 196608:Gd2MjndwWA1HeT39IigwqtauDXURuAEfCZEpUxshSkeS:GXQ1+TtIiFq8uARuAiCZEpUmhZeS
- TLSH T13DA633A9E3B201B5F9E2913EC2B6C14ED571745A87B5D3DF039006127F2BBE24939B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Loads dropped DLL
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.