General
- Target 2026-07-04_959a12a90f1c26cefba46a95546052fc_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 1.2MB
- Sample260704-erch7aay3z
- SHA256 3b74ecf7ce8deba343592298d887fbe1fc5157a7a8c2a8c193449291eae9e6f7
- MD5 959a12a90f1c26cefba46a95546052fc
- SHA1 7d34b2b68e00d5efa1be795c2576d89d5044ab69
- SHA512 1a2cd890b964477e6ea43688e9e689902cdc293522ffccc272a73d5d356bf11564a2d7b0e05cc366ca330280d5a7027227dab55f630dc879559ac25199cdcb9d
- SSDEEP 24576:W/t6WkcM5o9c7dvPHgvw/l7Cn1IaEjeGKqw40t8wwusZeI:KyjfgvwtpBKqwNt5yeI
- TLSH T10755BF05979641EED4B7D0B4CA563E27F5B2F8250239AB7B9FE40A948F23B20933C715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-04_959a12a90f1c26cefba46a95546052fc_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_959a12a90f1c26cefba46a95546052fc_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 1.2MB
- SHA256 3b74ecf7ce8deba343592298d887fbe1fc5157a7a8c2a8c193449291eae9e6f7
- MD5 959a12a90f1c26cefba46a95546052fc
- SHA1 7d34b2b68e00d5efa1be795c2576d89d5044ab69
- SHA512 1a2cd890b964477e6ea43688e9e689902cdc293522ffccc272a73d5d356bf11564a2d7b0e05cc366ca330280d5a7027227dab55f630dc879559ac25199cdcb9d
- SSDEEP 24576:W/t6WkcM5o9c7dvPHgvw/l7Cn1IaEjeGKqw40t8wwusZeI:KyjfgvwtpBKqwNt5yeI
- TLSH T10755BF05979641EED4B7D0B4CA563E27F5B2F8250239AB7B9FE40A948F23B20933C715
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Suspicious use of SetThreadContext