General
- Target 2026-07-06_b17c15d6a703b23826b5dbb2a35cb022_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.7MB
- Sample260706-wc8fraaw3s
- SHA256 ce630c94710b8ccf3c8d68a23b03f6e5f79e95823fdc19268f98375040b194a1
- MD5 b17c15d6a703b23826b5dbb2a35cb022
- SHA1 dafaad5946af0cdbaf3e590dc1ec61482ab76364
- SHA512 ff07567b76b8c5f458e7c0c9f1f18b5eaafa420841a16421066c6bd6d912a02bf54af3f078868cd82c6c256adf4c906b4409647feb4a7c76b2292b18feeb105d
- SSDEEP 98304:l4laGSWSj+F89lwum3gp2H2dOPNkxJMjlobRJVRe0D527BWG:mlaESl1XFlTVQBWG
- TLSH T13A867B03F19A11E8C05DD1798B5A9232EA71BC494B3576EF0B9077122F76EE0AB3D760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_b17c15d6a703b23826b5dbb2a35cb022_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_b17c15d6a703b23826b5dbb2a35cb022_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.7MB
- SHA256 ce630c94710b8ccf3c8d68a23b03f6e5f79e95823fdc19268f98375040b194a1
- MD5 b17c15d6a703b23826b5dbb2a35cb022
- SHA1 dafaad5946af0cdbaf3e590dc1ec61482ab76364
- SHA512 ff07567b76b8c5f458e7c0c9f1f18b5eaafa420841a16421066c6bd6d912a02bf54af3f078868cd82c6c256adf4c906b4409647feb4a7c76b2292b18feeb105d
- SSDEEP 98304:l4laGSWSj+F89lwum3gp2H2dOPNkxJMjlobRJVRe0D527BWG:mlaESl1XFlTVQBWG
- TLSH T13A867B03F19A11E8C05DD1798B5A9232EA71BC494B3576EF0B9077122F76EE0AB3D760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory