General
- Target 2026-07-01_040e4b67ae13781ddd31444732bef277_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 377KB
- Sample260701-v34ptabt6m
- SHA256 0214dcd8d99e5cd5316af024e283c3d52faf18e001dbec6784d9e977a56e5439
- MD5 040e4b67ae13781ddd31444732bef277
- SHA1 cc1d72428c8b552c232fb8382448eeb4e81e6538
- SHA512 62bea74e58ff6436740cb7bbe59257e2ce69f6f8c5c00e81d1eae1f28455aeee6539dcdf5bb41049ea255c4914cb72ff06619aec4b45d9d937c1f29c458623d7
- SSDEEP 6144:p+GYnA0zeW8Di50JziQ8kd3f+RysMFZzN/E/msHOtbSiqNsarwT:pYCDi50NiQDuysMFZzN/E/msup7sU
- TLSH T1CB848C06F75408F9D59BC57489924546DA39BC8F1B72EAEF17C8422A2F237F08E39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-01_040e4b67ae13781ddd31444732bef277_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_040e4b67ae13781ddd31444732bef277_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_040e4b67ae13781ddd31444732bef277_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 377KB
- SHA256 0214dcd8d99e5cd5316af024e283c3d52faf18e001dbec6784d9e977a56e5439
- MD5 040e4b67ae13781ddd31444732bef277
- SHA1 cc1d72428c8b552c232fb8382448eeb4e81e6538
- SHA512 62bea74e58ff6436740cb7bbe59257e2ce69f6f8c5c00e81d1eae1f28455aeee6539dcdf5bb41049ea255c4914cb72ff06619aec4b45d9d937c1f29c458623d7
- SSDEEP 6144:p+GYnA0zeW8Di50JziQ8kd3f+RysMFZzN/E/msHOtbSiqNsarwT:pYCDi50NiQDuysMFZzN/E/msup7sU
- TLSH T1CB848C06F75408F9D59BC57489924546DA39BC8F1B72EAEF17C8422A2F237F08E39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association