General
- Target 2026-06-27_8bdc97bd82c47bfc116487708e243f90_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 1.0MB
- Sample260629-fwfxvaez8k
- SHA256 3d50e39d6087e5176f4d4127f0380060b0ffcfcad1974953a01afd6c9e18b5e1
- MD5 8bdc97bd82c47bfc116487708e243f90
- SHA1 51d21a7edca4612123349bb91c43795368c4e76c
- SHA512 7a290ceab2b04672c50285e922935edff0a2032c38825e35fde905a086fa198b3299f97a63b59bb1c00db935c047927334e65e26f762ad6edc3719b715d215c8
- SSDEEP 24576:FXaOkm5pQBV7MBosKX3OjTL+O93l0fZk4Gi6:Ai6VoJ83Ojf+O93+x
- TLSH T1CB359D57A3A910F9D1A7C178C9528613F7B2B8551320DBDF13A08A791F236E46F3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_8bdc97bd82c47bfc116487708e243f90_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_8bdc97bd82c47bfc116487708e243f90_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_8bdc97bd82c47bfc116487708e243f90_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 1.0MB
- SHA256 3d50e39d6087e5176f4d4127f0380060b0ffcfcad1974953a01afd6c9e18b5e1
- MD5 8bdc97bd82c47bfc116487708e243f90
- SHA1 51d21a7edca4612123349bb91c43795368c4e76c
- SHA512 7a290ceab2b04672c50285e922935edff0a2032c38825e35fde905a086fa198b3299f97a63b59bb1c00db935c047927334e65e26f762ad6edc3719b715d215c8
- SSDEEP 24576:FXaOkm5pQBV7MBosKX3OjTL+O93l0fZk4Gi6:Ai6VoJ83Ojf+O93+x
- TLSH T1CB359D57A3A910F9D1A7C178C9528613F7B2B8551320DBDF13A08A791F236E46F3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.