General
- Target 2026-06-26_6ecc03d35c4b88596ce83cc9e1ef8d21_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 2.6MB
- Sample260629-sh9dfsh13k
- SHA256 2a934c90388c63171d0a9ee8f9667e5211167d53ea88de4edf03d47d5a5eb75a
- MD5 6ecc03d35c4b88596ce83cc9e1ef8d21
- SHA1 1432b720d45130ece06b4137691cdfc56fac0b0e
- SHA512 36f547e6aa6bd54dcace2850683be1dff12b2dcf6c09f9c1bbf303bc00433b47f1ce8bdb781bc5bf1d8c5b18c223da1534c24b79f49ca0f2cef14c5482353a74
- SSDEEP 49152:dc0U8muyqnL+Hre53rFn19Cr1THOmY5h+Yyl+lln8ZWy8:C02GL/1k1THO77hPe8
- TLSH T155C58E1A726801A8D177C1BCCAD64A47F7B2B809033196DF03E597AA2F67AE5077F311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-06-26_6ecc03d35c4b88596ce83cc9e1ef8d21_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_6ecc03d35c4b88596ce83cc9e1ef8d21_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_6ecc03d35c4b88596ce83cc9e1ef8d21_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 2.6MB
- SHA256 2a934c90388c63171d0a9ee8f9667e5211167d53ea88de4edf03d47d5a5eb75a
- MD5 6ecc03d35c4b88596ce83cc9e1ef8d21
- SHA1 1432b720d45130ece06b4137691cdfc56fac0b0e
- SHA512 36f547e6aa6bd54dcace2850683be1dff12b2dcf6c09f9c1bbf303bc00433b47f1ce8bdb781bc5bf1d8c5b18c223da1534c24b79f49ca0f2cef14c5482353a74
- SSDEEP 49152:dc0U8muyqnL+Hre53rFn19Cr1THOmY5h+Yyl+lln8ZWy8:C02GL/1k1THO77hPe8
- TLSH T155C58E1A726801A8D177C1BCCAD64A47F7B2B809033196DF03E597AA2F67AE5077F311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.