General
- Target 2026-06-28_5e0b3b2066493208da2c34ddb81073c9_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 8.9MB
- Sample260628-17442ags2m
- SHA256 c3e7e85b1e4419cc4ad3f6edd90e5a84adccc5364439dcd2be94bc59facc7dc7
- MD5 5e0b3b2066493208da2c34ddb81073c9
- SHA1 9c38c35e49ee0044fc8a50f3d3d38a716ce8f3b1
- SHA512 3c8c9ffdc6ad4d275e49b0f035c75f6ec247c51636081eeef972a74a5a3c3e81648f37d003e269589da2445831a6c01ed880eebfd01d36b00a5171f95a3321c6
- SSDEEP 98304:ihzbS4EzWW7guvlKJyPJJ+Rzx7Uetky5OooLQbN17D527BWG:ixbS4WW7tpJIQN17VQBWG
- TLSH T1FB968D23F2DA01D9E06ED2788B6A9232A972BC854B30B2DF075077551E76FE05B3D724
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_5e0b3b2066493208da2c34ddb81073c9_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_5e0b3b2066493208da2c34ddb81073c9_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 8.9MB
- SHA256 c3e7e85b1e4419cc4ad3f6edd90e5a84adccc5364439dcd2be94bc59facc7dc7
- MD5 5e0b3b2066493208da2c34ddb81073c9
- SHA1 9c38c35e49ee0044fc8a50f3d3d38a716ce8f3b1
- SHA512 3c8c9ffdc6ad4d275e49b0f035c75f6ec247c51636081eeef972a74a5a3c3e81648f37d003e269589da2445831a6c01ed880eebfd01d36b00a5171f95a3321c6
- SSDEEP 98304:ihzbS4EzWW7guvlKJyPJJ+Rzx7Uetky5OooLQbN17D527BWG:ixbS4WW7tpJIQN17VQBWG
- TLSH T1FB968D23F2DA01D9E06ED2788B6A9232A972BC854B30B2DF075077551E76FE05B3D724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory