2026-07-01_e9cd8f7cc6d4558fdc126bc2523e91ab_cobalt-strike_glassworm_icedid_satacom

General

Target
2026-07-01_e9cd8f7cc6d4558fdc126bc2523e91ab_cobalt-strike_glassworm_icedid_satacom
Size 352KB
Sample260702-brfn3ahs3n
SHA256 a877d1f43281ccfd0b1150d18fe698b777034720f8a98c1e0b647ced4d1b2410
MD5 e9cd8f7cc6d4558fdc126bc2523e91ab
SHA1 c24ff9a66495a2b293a8a42b03afd9858525bfb8
SHA512 1b1a445f28c353faca01582ad0e5b293d59272e0ae8a8e61cfa209a2460921712c1ca7d109ddec50b09b9cfe880bf5aa0655d78f5c05c68d5002e0314208d3bf
SSDEEP 3072:xJOCbB9tGE05iRkMBO8mtoVvnOjIBDMLgj2N4+rTQfL3qs1tpVobIUSUka2yap:x99tc5XJ8m6VSIBSC+rTumbe/p
TLSH
T1F5744A3D6ED42272D7BB92B9D4F105C6FF61B4227262AE0F519B03850D93BA77E8201D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-01_e9cd8f7cc6d4558fdc126bc2523e91ab_cobalt-strike_glassworm_icedid_satacom

File Explorer

2026-07-01_e9cd8f7cc6d4558fdc126bc2523e91ab_cobalt-strike_glassworm_icedid_satacom

.exe 352KB

2026-07-01_e9cd8f7cc6d4558fdc126bc2523e91ab_cobalt-strike_glassworm_icedid_satacom

SHA256 a877d1f43281ccfd0b1150d18fe698b777034720f8a98c1e0b647ced4d1b2410
MD5 e9cd8f7cc6d4558fdc126bc2523e91ab
SHA1 c24ff9a66495a2b293a8a42b03afd9858525bfb8
SHA512 1b1a445f28c353faca01582ad0e5b293d59272e0ae8a8e61cfa209a2460921712c1ca7d109ddec50b09b9cfe880bf5aa0655d78f5c05c68d5002e0314208d3bf
SSDEEP 3072:xJOCbB9tGE05iRkMBO8mtoVvnOjIBDMLgj2N4+rTQfL3qs1tpVobIUSUka2yap:x99tc5XJ8m6VSIBSC+rTumbe/p
TLSH
T1F5744A3D6ED42272D7BB92B9D4F105C6FF61B4227262AE0F519B03850D93BA77E8201D
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5656

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

61KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

225KB

Virtual Size

227KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-01_e9cd8f7cc6d4558fdc126bc2523e91ab_cobalt-strike_glassworm_icedid_satacom

generic