General
- Target 2026-07-06_bdb63d17104186695aeb280368aa8c3d_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 1.2MB
- Sample260706-wa6t5set8k
- SHA256 47857519ae9b25820eaf255f9ac6bf585cd76aeb45899e7763ed91156e08490f
- MD5 bdb63d17104186695aeb280368aa8c3d
- SHA1 d4973c27996ef0ec0b7fa17669f5f563784f9b15
- SHA512 a076a3b67fbeae3dd5746043b2fc30ee7347b188dd1f7ba3512e1dc54b8ad3fa90fdfe584c8f4cbbf54017e9c234ad6f85e076068f644cb1e2a849f51c08c91f
- SSDEEP 24576:jj+vdUBuUYAQBgrVbnI/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:P+vdKzYpBcVbnILNiXicJFFRGNzj3
- TLSH T1B245D0AAB3A487F9D86BC03CC9124106F7B1B868075297CB53A4436E5F337D65E3AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_bdb63d17104186695aeb280368aa8c3d_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_bdb63d17104186695aeb280368aa8c3d_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_bdb63d17104186695aeb280368aa8c3d_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 1.2MB
- SHA256 47857519ae9b25820eaf255f9ac6bf585cd76aeb45899e7763ed91156e08490f
- MD5 bdb63d17104186695aeb280368aa8c3d
- SHA1 d4973c27996ef0ec0b7fa17669f5f563784f9b15
- SHA512 a076a3b67fbeae3dd5746043b2fc30ee7347b188dd1f7ba3512e1dc54b8ad3fa90fdfe584c8f4cbbf54017e9c234ad6f85e076068f644cb1e2a849f51c08c91f
- SSDEEP 24576:jj+vdUBuUYAQBgrVbnI/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:P+vdKzYpBcVbnILNiXicJFFRGNzj3
- TLSH T1B245D0AAB3A487F9D86BC03CC9124106F7B1B868075297CB53A4436E5F337D65E3AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.