Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
11/05/2026, 16:04
General
- Target 2026-05-11_159312c746da01f08e9e098ef1919888_cobalt-strike_glassworm_njrat_satacom_vidar.exe
- Size 62.9MB
- Sample260511-tjee5sd13x
- SHA256 aa88c1e56ce22a8a1c4312210299da2ff020dadf720d1de5aafd0d58aad3ba5e
Malware Config
Signatures
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-11_159312c746da01f08e9e098ef1919888_cobalt-strike_glassworm_njrat_satacom_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-11_159312c746da01f08e9e098ef1919888_cobalt-strike_glassworm_njrat_satacom_vidar.exe"1⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4744-1-0x0000000180000000-0x0000000180A25000-memory.dmp
memory/4744-3-0x0000023AEFEC0000-0x0000023AEFED2000-memory.dmp
memory/4744-12-0x0000023AF1730000-0x0000023AF1764000-memory.dmp
memory/4744-27-0x0000023AF16F0000-0x0000023AF1702000-memory.dmp
memory/4744-18-0x0000023AF3C20000-0x0000023AF3CC7000-memory.dmp
memory/4744-15-0x0000023AF1EE0000-0x0000023AF1F3C000-memory.dmp
memory/4744-30-0x0000023AF1710000-0x0000023AF1723000-memory.dmp
memory/4744-24-0x0000023AF3D60000-0x0000023AF3E32000-memory.dmp
memory/4744-9-0x0000023AF2050000-0x0000023AF2208000-memory.dmp
memory/4744-21-0x0000023AF3CD0000-0x0000023AF3D5A000-memory.dmp
memory/4744-6-0x0000023AF1E40000-0x0000023AF1E7E000-memory.dmp
memory/4744-39-0x0000023AF1EB0000-0x0000023AF1EC6000-memory.dmp
memory/4744-36-0x0000023AEFF30000-0x0000023AEFF37000-memory.dmp
memory/4744-33-0x0000023AF1E80000-0x0000023AF1E88000-memory.dmp
memory/4744-42-0x0000023AEFF20000-0x0000023AEFF2D000-memory.dmp
memory/4744-45-0x0000023AF1F70000-0x0000023AF1F88000-memory.dmp
memory/4744-57-0x0000023AF2010000-0x0000023AF2050000-memory.dmp
memory/4744-54-0x0000023AF1F40000-0x0000023AF1F6A000-memory.dmp
memory/4744-52-0x0000023AF1F90000-0x0000023AF1FB1000-memory.dmp
memory/4744-60-0x0000023AF3E40000-0x0000023AF3E7C000-memory.dmp
memory/4744-48-0x0000023AF3F20000-0x0000023AF3FE4000-memory.dmp
memory/4744-63-0x0000023AF4530000-0x0000023AF45AC000-memory.dmp
memory/4744-66-0x0000023AF3E80000-0x0000023AF3E99000-memory.dmp
memory/4744-69-0x0000023AEFD30000-0x0000023AEFD60000-memory.dmp
memory/4744-73-0x0000023AF3EA0000-0x0000023AF3EB9000-memory.dmp
memory/4744-79-0x0000023AF3EC0000-0x0000023AF3ED7000-memory.dmp
memory/4744-76-0x0000023AF3EF0000-0x0000023AF3F15000-memory.dmp
memory/4744-82-0x0000023AF4750000-0x0000023AF4767000-memory.dmp
memory/4744-85-0x0000023AEFD30000-0x0000023AEFD60000-memory.dmp