General
- Target 2026-04-21_af42e65a05c1cb36aa75e47f97ef98bc_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.0MB
- Sample260421-hmthpadv7s
- SHA256 4dfbc356aad7f9c6a1de03632857450466e3f533141dffbe30ddf7772a63fa20
- MD5 af42e65a05c1cb36aa75e47f97ef98bc
- SHA1 b9daa920b73b65a4b4bef24101db88f9b8baaef4
- SHA512 014d369e827ab89bd6e14649087e5a2b60f39c6eb78d6e9c46d42fbcd94c786f0988a09af36ee75fa74de77c1e2132cdb78fea65afcccbc5c943e782bac22aef
- SSDEEP 49152:ywjmB1bRDJVPSkg4PevJSWqrGyFgHspjAfpzmADDSlslHQmAuXIxVVYp4Dmg27RN:VmPhPgueh4CyxtzcbXeD527BWG
- TLSH T13F169D13F1DA01DAC05DD1B8874A9232F961BC494B35B2DF0B9177562A7AEE09F3E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-21_af42e65a05c1cb36aa75e47f97ef98bc_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-21_af42e65a05c1cb36aa75e47f97ef98bc_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.0MB
- SHA256 4dfbc356aad7f9c6a1de03632857450466e3f533141dffbe30ddf7772a63fa20
- MD5 af42e65a05c1cb36aa75e47f97ef98bc
- SHA1 b9daa920b73b65a4b4bef24101db88f9b8baaef4
- SHA512 014d369e827ab89bd6e14649087e5a2b60f39c6eb78d6e9c46d42fbcd94c786f0988a09af36ee75fa74de77c1e2132cdb78fea65afcccbc5c943e782bac22aef
- SSDEEP 49152:ywjmB1bRDJVPSkg4PevJSWqrGyFgHspjAfpzmADDSlslHQmAuXIxVVYp4Dmg27RN:VmPhPgueh4CyxtzcbXeD527BWG
- TLSH T13F169D13F1DA01DAC05DD1B8874A9232F961BC494B35B2DF0B9177562A7AEE09F3E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Drops file in System32 directory