General
- Target 2026-07-03_bf00436ccb8dcc5968ab14f1c327acf2_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 377KB
- Sample260703-xkk6vsbs4p
- SHA256 98b842af9c3aef299459480571b18eae36aa75f64aaec1e8f1e839029f019d75
- MD5 bf00436ccb8dcc5968ab14f1c327acf2
- SHA1 678e8b78ec4a88a313c8cddc01a130682f23d4a9
- SHA512 4463becc9b94541327b813599a3eebe8a817c40ec07372416ba5193699a1ad9c529c50788357e88931c2bfa3d8cca506cf1ec7f745c4882aadb6d06526563848
- SSDEEP 6144:p+GYnA0zeW8Di50JziQ8kd3f+RysMFZzN/E/msHOtbSiqNsarw:pYCDi50NiQDuysMFZzN/E/msup7s
- TLSH T17D848C06F75408FDD59BC57489924546DA39B88F1B72EAEF17C8422A2F237F08E39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-03_bf00436ccb8dcc5968ab14f1c327acf2_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_bf00436ccb8dcc5968ab14f1c327acf2_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_bf00436ccb8dcc5968ab14f1c327acf2_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 377KB
- SHA256 98b842af9c3aef299459480571b18eae36aa75f64aaec1e8f1e839029f019d75
- MD5 bf00436ccb8dcc5968ab14f1c327acf2
- SHA1 678e8b78ec4a88a313c8cddc01a130682f23d4a9
- SHA512 4463becc9b94541327b813599a3eebe8a817c40ec07372416ba5193699a1ad9c529c50788357e88931c2bfa3d8cca506cf1ec7f745c4882aadb6d06526563848
- SSDEEP 6144:p+GYnA0zeW8Di50JziQ8kd3f+RysMFZzN/E/msHOtbSiqNsarw:pYCDi50NiQDuysMFZzN/E/msup7s
- TLSH T17D848C06F75408FDD59BC57489924546DA39B88F1B72EAEF17C8422A2F237F08E39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association