General
- Target 2026-04-24_02d150c649727b574287810208dfbb3d_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 13.2MB
- Sample260424-d3csnady4y
- SHA256 7d174a5363bfdcae77a650c44ce43f7105881b3193d1c14e8b9ae988d7a8583f
- MD5 02d150c649727b574287810208dfbb3d
- SHA1 e3295247a938ab5ebd3bf6f1a71d51213ed9d320
- SHA512 c2829c13c563167d69521e3dd2926cf74beece353892cfa3f51433a1377055838e0d11c34e15c884500af86cbf3648032234a55d43a491d087138e26d91851c6
- SSDEEP 98304:p5z+9uk1GphQEHcTeqqIRVTYmnbOMt7ZUy6TX0mfsK:fKUGEHcTeqPRqCt9Uy6TX0mkK
- TLSH T183D67E4192E480F7E1AED1F886399532F7713C4A2172D76B0691CA5B2F67730CEA9B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-24_02d150c649727b574287810208dfbb3d_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-24_02d150c649727b574287810208dfbb3d_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11-20260130-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-24_02d150c649727b574287810208dfbb3d_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 13.2MB
- SHA256 7d174a5363bfdcae77a650c44ce43f7105881b3193d1c14e8b9ae988d7a8583f
- MD5 02d150c649727b574287810208dfbb3d
- SHA1 e3295247a938ab5ebd3bf6f1a71d51213ed9d320
- SHA512 c2829c13c563167d69521e3dd2926cf74beece353892cfa3f51433a1377055838e0d11c34e15c884500af86cbf3648032234a55d43a491d087138e26d91851c6
- SSDEEP 98304:p5z+9uk1GphQEHcTeqqIRVTYmnbOMt7ZUy6TX0mfsK:fKUGEHcTeqPRqCt9Uy6TX0mkK
- TLSH T183D67E4192E480F7E1AED1F886399532F7713C4A2172D76B0691CA5B2F67730CEA9B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Modifies system executable filetype association