General
- Target 2026-07-05_077f68a6c70afad40e856e38a2f058e9_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 1.6MB
- Sample260705-cdmqwsgv7w
- SHA256 324652d39b8002cc805201784335b6f4d4ebfdf003462bd48432335833a2526c
- MD5 077f68a6c70afad40e856e38a2f058e9
- SHA1 9cb45f7fe17631cbd62156861b90a44de538929e
- SHA512 27b49da8d2876e7bef94ac0b53c93140c5a7d93e234c987a089dfbe974778e16a1fc00a3bcf9cbc2e93e4503adce447e6dcc917e645558e14110d93e24a277c0
- SSDEEP 24576:2RqfcJzPFhQAoDQeR74F66Jh/WsT0XaTGl63oqZD03Jv//45xA7bHB:cmm4i0HUxA3H
- TLSH T15D75D647EBB651E4D8FAD1399652722BBC71385983349BD797808A074B62FF0E93E340
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-05_077f68a6c70afad40e856e38a2f058e9_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_077f68a6c70afad40e856e38a2f058e9_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_077f68a6c70afad40e856e38a2f058e9_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 1.6MB
- SHA256 324652d39b8002cc805201784335b6f4d4ebfdf003462bd48432335833a2526c
- MD5 077f68a6c70afad40e856e38a2f058e9
- SHA1 9cb45f7fe17631cbd62156861b90a44de538929e
- SHA512 27b49da8d2876e7bef94ac0b53c93140c5a7d93e234c987a089dfbe974778e16a1fc00a3bcf9cbc2e93e4503adce447e6dcc917e645558e14110d93e24a277c0
- SSDEEP 24576:2RqfcJzPFhQAoDQeR74F66Jh/WsT0XaTGl63oqZD03Jv//45xA7bHB:cmm4i0HUxA3H
- TLSH T15D75D647EBB651E4D8FAD1399652722BBC71385983349BD797808A074B62FF0E93E340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Accesses cryptocurrency files/wallets, possible credential harvesting