General
- Target 2026-06-26_cc2f5a06edaf7d45be261d5e87378126_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 8.6MB
- Sample260629-pfevaacy91
- SHA256 838fb84c6bd4ca966a54c6b175223a6414fceef36749ef21b0176d6ac54818d3
- MD5 cc2f5a06edaf7d45be261d5e87378126
- SHA1 3707914e0834c9553498edfa6a110c8e50ae972e
- SHA512 b805d7b9c1e1721b97c101e1e110393e76fd24624d4439f89e933998ea43e4a7f68e25a3abf879598d3c4f2ed49d4bc3f566663f87aa42c1a31dd6805ff2b113
- SSDEEP 98304:amUyBuYtMGsTwrhcJfZ/q0OAA3qN9s+up/CePMYqDXq:amUiZFpqN9o/CeJqzq
- TLSH T1C3968E13F2D601D9E06ED178876AA233AA72BC854B34B2DF0B5036551E79FE06B3D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_cc2f5a06edaf7d45be261d5e87378126_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_cc2f5a06edaf7d45be261d5e87378126_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 8.6MB
- SHA256 838fb84c6bd4ca966a54c6b175223a6414fceef36749ef21b0176d6ac54818d3
- MD5 cc2f5a06edaf7d45be261d5e87378126
- SHA1 3707914e0834c9553498edfa6a110c8e50ae972e
- SHA512 b805d7b9c1e1721b97c101e1e110393e76fd24624d4439f89e933998ea43e4a7f68e25a3abf879598d3c4f2ed49d4bc3f566663f87aa42c1a31dd6805ff2b113
- SSDEEP 98304:amUyBuYtMGsTwrhcJfZ/q0OAA3qN9s+up/CePMYqDXq:amUiZFpqN9o/CeJqzq
- TLSH T1C3968E13F2D601D9E06ED178876AA233AA72BC854B34B2DF0B5036551E79FE06B3D721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory