General
- Target 2026-06-25_87c59802ddb6b64bf56f617311cd5fbf_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 377KB
- Sample260629-z4fftsfv8v
- SHA256 08c1e065be597e6360479bed20851ba1747e53201217cec63400dadf474a04ad
- MD5 87c59802ddb6b64bf56f617311cd5fbf
- SHA1 4c3bca3b0e191d45bb8160307e3935135d27af7b
- SHA512 92ab83cbc86b48cce0359a4035e1985d4e5d1d52c60207c4dd16b8ac22212696da5fca1908577f2e93fcb0320dce16ac25d5bdf43da83934d994bc4c97a0d7b7
- SSDEEP 6144:p+GYnA0zeW8Di50JziQ81d3f+RysMFZzN/E/msHOtbSiqNsarw:pYCDi50NiQOuysMFZzN/E/msup7s
- TLSH T1E4848C16F75408F9D49BC57489924546DA39BC8F0B72EAEF17D8422A2F237F08E39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-25_87c59802ddb6b64bf56f617311cd5fbf_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_87c59802ddb6b64bf56f617311cd5fbf_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_87c59802ddb6b64bf56f617311cd5fbf_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 377KB
- SHA256 08c1e065be597e6360479bed20851ba1747e53201217cec63400dadf474a04ad
- MD5 87c59802ddb6b64bf56f617311cd5fbf
- SHA1 4c3bca3b0e191d45bb8160307e3935135d27af7b
- SHA512 92ab83cbc86b48cce0359a4035e1985d4e5d1d52c60207c4dd16b8ac22212696da5fca1908577f2e93fcb0320dce16ac25d5bdf43da83934d994bc4c97a0d7b7
- SSDEEP 6144:p+GYnA0zeW8Di50JziQ81d3f+RysMFZzN/E/msHOtbSiqNsarw:pYCDi50NiQOuysMFZzN/E/msup7s
- TLSH T1E4848C16F75408F9D49BC57489924546DA39BC8F0B72EAEF17D8422A2F237F08E39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association