General
- Target 2026-07-06_267d472855ae0453df3a4352d643d3e7_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 8.9MB
- Sample260706-t5pg8sdw7l
- SHA256 11394e7ee70b108b3966ddea9a34d641b8d257aab75d473833673b169d44b65d
- MD5 267d472855ae0453df3a4352d643d3e7
- SHA1 e4fc08ee76a6c5bd72d587874036bc3032518efd
- SHA512 b538de284dca523ef220e2c6bd7b2588167f8dc76fd3f104a10f28f83bcf7ce8daa23f2fc35719039f8f834a16e1da89a441c4f766e2b32f6e6c2be992ff9b8a
- SSDEEP 98304:ZhzbS4EzWW7guvlKJyPJJ+Rzx7Uetky5OooLQbN1GD527BWG:ZxbS4WW7tpJIQN1GVQBWG
- TLSH T166968D23F2DA01D9E06ED2788B6A9232A972BC854B30B2DF075077551E76FE05B3D724
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_267d472855ae0453df3a4352d643d3e7_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_267d472855ae0453df3a4352d643d3e7_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 8.9MB
- SHA256 11394e7ee70b108b3966ddea9a34d641b8d257aab75d473833673b169d44b65d
- MD5 267d472855ae0453df3a4352d643d3e7
- SHA1 e4fc08ee76a6c5bd72d587874036bc3032518efd
- SHA512 b538de284dca523ef220e2c6bd7b2588167f8dc76fd3f104a10f28f83bcf7ce8daa23f2fc35719039f8f834a16e1da89a441c4f766e2b32f6e6c2be992ff9b8a
- SSDEEP 98304:ZhzbS4EzWW7guvlKJyPJJ+Rzx7Uetky5OooLQbN1GD527BWG:ZxbS4WW7tpJIQN1GVQBWG
- TLSH T166968D23F2DA01D9E06ED2788B6A9232A972BC854B30B2DF075077551E76FE05B3D724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory