General
- Target 2026-05-06_eefc069168425f55aeb5fb810e006f7f_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.0MB
- Sample260506-pg2qfaet2q
- SHA256 a531f81bcc8aa2d5e9f573311c9afe03628347d3931c2647de0e0073e6cd6879
- MD5 eefc069168425f55aeb5fb810e006f7f
- SHA1 c1e434a2807a74397ae679897287e85d1e5cafb5
- SHA512 71c9876f795f1d5a9c805fe040c7b43f41a4d76cf889fbcfbd53c146dae10f16dc3b22022929d9851352f8b81dff5a5821b08ccd6af0984f89163349cb716d4f
- SSDEEP 49152:rbCN8nfGLpCzTa7J4uuYAT83B8gc/VjDwjQPGcjx2k35TLmCRiZlFHW5jmkll4co:K6f8CMlBWa6f/mHOFD527BWG
- TLSH T17E168D03F2DA41D8C05DD1B9874B8532AE61BC4A0B31B2DF0B6176522A76FE4AF3E754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-06_eefc069168425f55aeb5fb810e006f7f_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260130-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-06_eefc069168425f55aeb5fb810e006f7f_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.0MB
- SHA256 a531f81bcc8aa2d5e9f573311c9afe03628347d3931c2647de0e0073e6cd6879
- MD5 eefc069168425f55aeb5fb810e006f7f
- SHA1 c1e434a2807a74397ae679897287e85d1e5cafb5
- SHA512 71c9876f795f1d5a9c805fe040c7b43f41a4d76cf889fbcfbd53c146dae10f16dc3b22022929d9851352f8b81dff5a5821b08ccd6af0984f89163349cb716d4f
- SSDEEP 49152:rbCN8nfGLpCzTa7J4uuYAT83B8gc/VjDwjQPGcjx2k35TLmCRiZlFHW5jmkll4co:K6f8CMlBWa6f/mHOFD527BWG
- TLSH T17E168D03F2DA41D8C05DD1B9874B8532AE61BC4A0B31B2DF0B6176522A76FE4AF3E754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1