General
- Target 2026-06-26_55246a394605367705b5128e51c41d32_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- Sample260629-teaw6aay2q
- SHA256 e984bc2083baab6ef29f83dea31a6ec79c86a4cb76aeb587bfeb8ec6e1b1ed5d
- MD5 55246a394605367705b5128e51c41d32
- SHA1 64b5007e566759f0f6b7eca06e34f7dc5892727b
- SHA512 b4b94cb5fd37896cf2daf836c52c1730247c9c317472bcf07a26653df64bb8123de27097c78fe9354751c85fcd96e09db605b7cf91dff59098d996bc51363adb
- SSDEEP 98304:LvoeHjThCj5irrDOjjK6K6dU5ObfLP2B7wRGpj3:MeD+irrDOjjK6K63n2FF9
- TLSH T1AB867C13F2A501FCD05ED974CF3A52329A357C4A8BB092EF169836E11A75ED47B38B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_55246a394605367705b5128e51c41d32_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_55246a394605367705b5128e51c41d32_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- SHA256 e984bc2083baab6ef29f83dea31a6ec79c86a4cb76aeb587bfeb8ec6e1b1ed5d
- MD5 55246a394605367705b5128e51c41d32
- SHA1 64b5007e566759f0f6b7eca06e34f7dc5892727b
- SHA512 b4b94cb5fd37896cf2daf836c52c1730247c9c317472bcf07a26653df64bb8123de27097c78fe9354751c85fcd96e09db605b7cf91dff59098d996bc51363adb
- SSDEEP 98304:LvoeHjThCj5irrDOjjK6K6dU5ObfLP2B7wRGpj3:MeD+irrDOjjK6K63n2FF9
- TLSH T1AB867C13F2A501FCD05ED974CF3A52329A357C4A8BB092EF169836E11A75ED47B38B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1