General
- Target 2026-07-06_8269c3527cf8031488f57b76bbe81c9d_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 2.1MB
- Sample260706-ng188sat2l
- SHA256 82442e7cfbefc777e79f5874887274e748a91803b8eb5d5aacd8e5e6a64964d4
- MD5 8269c3527cf8031488f57b76bbe81c9d
- SHA1 e2ea151ab55cd985e62aa2515858c58775407855
- SHA512 cd160869a85bee4bd376c1cb4a7fec8a067470ba2582e71b32235585ec915f98063f4291d3f889d456fcfbc9c07f31c01b7da305b926b750c659988e5062168e
- SSDEEP 24576:cCR35APzq1y7dfoklmaMf8meoxz/y/N9w/X/2743TvRk6NwG:cCRJqzGyJzQEmDv66mG
- TLSH T174A58C292E581DCCD466843DCB83868ED2B1BD192FB14BD71BA17BA72E320D01E7B751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_8269c3527cf8031488f57b76bbe81c9d_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_8269c3527cf8031488f57b76bbe81c9d_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_8269c3527cf8031488f57b76bbe81c9d_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 2.1MB
- SHA256 82442e7cfbefc777e79f5874887274e748a91803b8eb5d5aacd8e5e6a64964d4
- MD5 8269c3527cf8031488f57b76bbe81c9d
- SHA1 e2ea151ab55cd985e62aa2515858c58775407855
- SHA512 cd160869a85bee4bd376c1cb4a7fec8a067470ba2582e71b32235585ec915f98063f4291d3f889d456fcfbc9c07f31c01b7da305b926b750c659988e5062168e
- SSDEEP 24576:cCR35APzq1y7dfoklmaMf8meoxz/y/N9w/X/2743TvRk6NwG:cCRJqzGyJzQEmDv66mG
- TLSH T174A58C292E581DCCD466843DCB83868ED2B1BD192FB14BD71BA17BA72E320D01E7B751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.