General
- Target 2026-06-28_d0c8b8830c3ab70a00d6f3a40f1c8ab5_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- Sample260628-xkfalsbz4w
- SHA256 4b4b871949a39e4089d47702630172f21842ab7af70247375302dc4388422fe7
- MD5 d0c8b8830c3ab70a00d6f3a40f1c8ab5
- SHA1 7fa453c70976e6c8b363b5537b8ad4077e5a54e4
- SHA512 b2ba287d9fb44c238432114551accada50237cdb1766545e84cdfb777ad7ed4b50f93064d85a424729eecb6fe536c1eee9a02b12079b4157f993c8d90ca03b7c
- SSDEEP 98304:RIEBslRmsquRfCaIbrpMIcjmg5hr4peHBTMLm:GESlg18IbrpMIcjmErBwL
- TLSH T18E868C13F2A501ECD05ED974CF3A52329B357C4A8BB0A2EF159836E11A75ED47B38B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_d0c8b8830c3ab70a00d6f3a40f1c8ab5_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_d0c8b8830c3ab70a00d6f3a40f1c8ab5_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- SHA256 4b4b871949a39e4089d47702630172f21842ab7af70247375302dc4388422fe7
- MD5 d0c8b8830c3ab70a00d6f3a40f1c8ab5
- SHA1 7fa453c70976e6c8b363b5537b8ad4077e5a54e4
- SHA512 b2ba287d9fb44c238432114551accada50237cdb1766545e84cdfb777ad7ed4b50f93064d85a424729eecb6fe536c1eee9a02b12079b4157f993c8d90ca03b7c
- SSDEEP 98304:RIEBslRmsquRfCaIbrpMIcjmg5hr4peHBTMLm:GESlg18IbrpMIcjmErBwL
- TLSH T18E868C13F2A501ECD05ED974CF3A52329B357C4A8BB0A2EF159836E11A75ED47B38B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1