General
- Target 2026-06-26_3fe17ead50d6cc914649f3cb5468e9fd_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 46.4MB
- Sample260629-t5wljsbw2q
- SHA256 1dd13cfd531f53f775a55cc8ea5fbc374ab7de22da30b8de70843dba5981c6b3
- MD5 3fe17ead50d6cc914649f3cb5468e9fd
- SHA1 e838e76482620ce3dc5a8a9474f558d374c42440
- SHA512 c7e59a0f3694aa9f7b143452053e448dedf2ab6165916508753e99c7fc00849dd1ce30b7bdf2d9dacfd1f714119d84021c38a2c1d8104f6ebfcd28c393869b8e
- SSDEEP 393216:wz9acPaemDUSCMWtu2hsnoKEtKDengbdK7fVJf7CGVZBS9MgDKGo9QwJOsG1doxt:/RK9J7wb+iG8xm5
- TLSH T19BB77C9673F441EAE1AED134C9678A37EAB1BC451430434B2560FB9BAF33660AD3D361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-26_3fe17ead50d6cc914649f3cb5468e9fd_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_3fe17ead50d6cc914649f3cb5468e9fd_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_3fe17ead50d6cc914649f3cb5468e9fd_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 46.4MB
- SHA256 1dd13cfd531f53f775a55cc8ea5fbc374ab7de22da30b8de70843dba5981c6b3
- MD5 3fe17ead50d6cc914649f3cb5468e9fd
- SHA1 e838e76482620ce3dc5a8a9474f558d374c42440
- SHA512 c7e59a0f3694aa9f7b143452053e448dedf2ab6165916508753e99c7fc00849dd1ce30b7bdf2d9dacfd1f714119d84021c38a2c1d8104f6ebfcd28c393869b8e
- SSDEEP 393216:wz9acPaemDUSCMWtu2hsnoKEtKDengbdK7fVJf7CGVZBS9MgDKGo9QwJOsG1doxt:/RK9J7wb+iG8xm5
- TLSH T19BB77C9673F441EAE1AED134C9678A37EAB1BC451430434B2560FB9BAF33660AD3D361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association