General
- Target 2026-05-11_00b9b5e8d34cc6b2abe6c0112d7344fc_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 8.9MB
- Sample260511-v1zyvaa13p
- SHA256 f46e06a4b7b5d8aace612fc1607884ef62fedf917e2968dfe47a7e84a68e30ed
- MD5 00b9b5e8d34cc6b2abe6c0112d7344fc
- SHA1 39660ddbade8c0d69dbadf40c8e4195930628338
- SHA512 03b7174414316926827d93c224a5cf4745bc27fdcd25d1eb61ac1e70915740ad01429b6b985554c517444107a9f5a6d1c225a98f0af46f5d54aa060ce921cf80
- SSDEEP 98304:WAW3TxgcOcB5PezCSxHUo3/aW6GoOMDdxaJ97DwsCjD527BWG:WAItcddCIHiY7D8jVQBWG
- TLSH T1B1967D23F2E601E9F06ED178876A9232A972BC854B30B2DF075076651E76FE05B3D724
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-11_00b9b5e8d34cc6b2abe6c0112d7344fc_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260130-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_00b9b5e8d34cc6b2abe6c0112d7344fc_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 8.9MB
- SHA256 f46e06a4b7b5d8aace612fc1607884ef62fedf917e2968dfe47a7e84a68e30ed
- MD5 00b9b5e8d34cc6b2abe6c0112d7344fc
- SHA1 39660ddbade8c0d69dbadf40c8e4195930628338
- SHA512 03b7174414316926827d93c224a5cf4745bc27fdcd25d1eb61ac1e70915740ad01429b6b985554c517444107a9f5a6d1c225a98f0af46f5d54aa060ce921cf80
- SSDEEP 98304:WAW3TxgcOcB5PezCSxHUo3/aW6GoOMDdxaJ97DwsCjD527BWG:WAItcddCIHiY7D8jVQBWG
- TLSH T1B1967D23F2E601E9F06ED178876A9232A972BC854B30B2DF075076651E76FE05B3D724
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Checks whether UAC is enabled
Drops file in System32 directory