General
- Target 2026-06-30_c364817c0e564f0a33eceb624f6d0612_cobalt-strike_glassworm_icedid_redline-stealer_rhadamanthys_ryuk_satacom_smoke-loader_stealc_tofsee_vidar_xworm
- Size 573KB
- Sample260701-dfhemaez41
- SHA256 b0da095f5afdfab7a99e0f51ec78e74bc4ecebd82b4958176349738d786ef8fa
- MD5 c364817c0e564f0a33eceb624f6d0612
- SHA1 5c66b3aa2e964ec20a8653841c9b495624362fd3
- SHA512 5abb7d65fc5506983b366480681fe0be8a0fbabf3fda9c1deeb6be6cd4e0aef50d3c576d908b419fa5ba7b3b379b2ff97a86979ab647fc19e40fac1966707ad6
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msup7skBv3GySq0zzZM5:693gThBfIq0zzW
- TLSH T157C49F12F7D404F9E5E7913089B65252AB39BC9A0B31EEDF579842291F727E0CE38712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-30_c364817c0e564f0a33eceb624f6d0612_cobalt-strike_glassworm_icedid_redline-stealer_rhadamant.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_c364817c0e564f0a33eceb624f6d0612_cobalt-strike_glassworm_icedid_redline-stealer_rhadamant.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_c364817c0e564f0a33eceb624f6d0612_cobalt-strike_glassworm_icedid_redline-stealer_rhadamanthys_ryuk_satacom_smoke-loader_stealc_tofsee_vidar_xworm
- Size 573KB
- SHA256 b0da095f5afdfab7a99e0f51ec78e74bc4ecebd82b4958176349738d786ef8fa
- MD5 c364817c0e564f0a33eceb624f6d0612
- SHA1 5c66b3aa2e964ec20a8653841c9b495624362fd3
- SHA512 5abb7d65fc5506983b366480681fe0be8a0fbabf3fda9c1deeb6be6cd4e0aef50d3c576d908b419fa5ba7b3b379b2ff97a86979ab647fc19e40fac1966707ad6
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msup7skBv3GySq0zzZM5:693gThBfIq0zzW
- TLSH T157C49F12F7D404F9E5E7913089B65252AB39BC9A0B31EEDF579842291F727E0CE38712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association