General
- Target 2026-03-24_21e3ee033f416297165ed67f68382e3f_cobalt-strike_glassworm_icedid_njrat_vidar
- Size 817KB
- Sample260324-psa2vsgx3w
- SHA256 c369df262b5c786b950a0e412cd93a9da9a22e0048dcc8ff88197a3f3d2266e5
Score
10/10
Malware Config
Targets
-
- Target 2026-03-24_21e3ee033f416297165ed67f68382e3f_cobalt-strike_glassworm_icedid_njrat_vidar
- Size 817KB
- SHA256 c369df262b5c786b950a0e412cd93a9da9a22e0048dcc8ff88197a3f3d2266e5
Score9/10-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Renames multiple (15206) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification