General
- Target 2026-07-01_3f1f87938334cdb1f37c84f1475e42ab_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 4.0MB
- Sample260701-l361hadv7w
- SHA256 4b7f2058c565cffa8c5088cf378050488ad2df6aa9a4115bbfae04ab19db836f
- MD5 3f1f87938334cdb1f37c84f1475e42ab
- SHA1 ff258408345e4ac5110417ce3132cd36d2fa9238
- SHA512 d517095279a833cec5bc55efa134b2614a5d790bb109894165e912f0346b9edbbeb23a22a7a0248ff75bb141f738b5e6d7e550789cd2e161b0d17a9544fe43b4
- SSDEEP 49152:wUaKkGbsdog+YG+k4wlNnlIz4O7yP5AoC125PGRxcacW/vVIuJPwi9xSI:a93FcScW/txDSI
- TLSH T186168DA753DE42D4E45DA3B08D2D6ED3B6F2B4551730C4CFA3BAAC0089526EA2F78741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_3f1f87938334cdb1f37c84f1475e42ab_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_3f1f87938334cdb1f37c84f1475e42ab_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_3f1f87938334cdb1f37c84f1475e42ab_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 4.0MB
- SHA256 4b7f2058c565cffa8c5088cf378050488ad2df6aa9a4115bbfae04ab19db836f
- MD5 3f1f87938334cdb1f37c84f1475e42ab
- SHA1 ff258408345e4ac5110417ce3132cd36d2fa9238
- SHA512 d517095279a833cec5bc55efa134b2614a5d790bb109894165e912f0346b9edbbeb23a22a7a0248ff75bb141f738b5e6d7e550789cd2e161b0d17a9544fe43b4
- SSDEEP 49152:wUaKkGbsdog+YG+k4wlNnlIz4O7yP5AoC125PGRxcacW/vVIuJPwi9xSI:a93FcScW/txDSI
- TLSH T186168DA753DE42D4E45DA3B08D2D6ED3B6F2B4551730C4CFA3BAAC0089526EA2F78741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.