General
- Target 2026-11-12_4f053bee760fe8bf55ada182a6a2fe15_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 10.1MB
- Sample261113-dvs5nsfs4v
- SHA256 630e72e97fcccdea3f212849e78f0cda6cc401ad3893d9de417c9fcf60bfebfb
- MD5 4f053bee760fe8bf55ada182a6a2fe15
- SHA1 eddfc0584315eb6014f1dd5bca9e26472ec0c367
- SHA512 87e96a90eb07f8c7602f7c2ca2088e3333bd02276dbf1c31a01fa0b927085d3fce29611b03c847644ca1f91ee78b4ad4024d19f621c19dfadfa5c86bc728546c
- SSDEEP 196608:xa85DbJrtewupFxA1HeT39IigwqtauDXURuAtgfdHXmb4mEQ8iS:c85vz1E61+TtIiFq8uARuAtgFXmb4mEb
- TLSH T114B63359E3F204FAE9E5813ED2ABC18AF221B5674715D7CF539006432F23AE1493AF52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-11-12_4f053bee760fe8bf55ada182a6a2fe15_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-12_4f053bee760fe8bf55ada182a6a2fe15_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 10.1MB
- SHA256 630e72e97fcccdea3f212849e78f0cda6cc401ad3893d9de417c9fcf60bfebfb
- MD5 4f053bee760fe8bf55ada182a6a2fe15
- SHA1 eddfc0584315eb6014f1dd5bca9e26472ec0c367
- SHA512 87e96a90eb07f8c7602f7c2ca2088e3333bd02276dbf1c31a01fa0b927085d3fce29611b03c847644ca1f91ee78b4ad4024d19f621c19dfadfa5c86bc728546c
- SSDEEP 196608:xa85DbJrtewupFxA1HeT39IigwqtauDXURuAtgfdHXmb4mEQ8iS:c85vz1E61+TtIiFq8uARuAtgFXmb4mEb
- TLSH T114B63359E3F204FAE9E5813ED2ABC18AF221B5674715D7CF539006432F23AE1493AF52
- MD5 SHA1 SHA512 SSDEEP TLSH
Loads dropped DLL
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.