General
- Target 2026-03-24_6a0a21bf4f3140148bdf905a20446820_cobalt-strike_glassworm_icedid_njrat_vidar
- Size 817KB
- Sample260324-mk7dzsev2t
- SHA256 522c9f8d614818b2c0489763144648fcfdf7202f1e9c413f59683fa23373b7ea
Score
10/10
Malware Config
Targets
-
- Target 2026-03-24_6a0a21bf4f3140148bdf905a20446820_cobalt-strike_glassworm_icedid_njrat_vidar
- Size 817KB
- SHA256 522c9f8d614818b2c0489763144648fcfdf7202f1e9c413f59683fa23373b7ea
Score9/10-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Renames multiple (15333) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification