General
- Target 2026-07-07_51ec1008b185ed9ab5751a88c73b22fb_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 632KB
- Sample260707-mln9ssfz4y
- SHA256 44379b8232a9c64a1f6bcad2fbfc10dd62d22d57bf3360694b1d2c338e3d449d
- MD5 51ec1008b185ed9ab5751a88c73b22fb
- SHA1 d33e4101e450a993e47d02039a861fe428ccb46d
- SHA512 ea776747ee7c515e51f43dda74bbd7d96eb4b7ab5856dcb4297f741d313acd0cc7e0afc5a32b56fb784a53eda7103eef153128134fdb9f6ee36faabb9e2f7e7a
- SSDEEP 12288:hn7o3IhmNYnLmobvpOF1sOAFnkZOw3+rt:6TCmobhe27FnkZU
- TLSH T1A0D48DA5E7A812F8E1B7D178C9530542E772BC460360ABCF039066B61F276E56E3F721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_51ec1008b185ed9ab5751a88c73b22fb_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_51ec1008b185ed9ab5751a88c73b22fb_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260706-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_51ec1008b185ed9ab5751a88c73b22fb_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 632KB
- SHA256 44379b8232a9c64a1f6bcad2fbfc10dd62d22d57bf3360694b1d2c338e3d449d
- MD5 51ec1008b185ed9ab5751a88c73b22fb
- SHA1 d33e4101e450a993e47d02039a861fe428ccb46d
- SHA512 ea776747ee7c515e51f43dda74bbd7d96eb4b7ab5856dcb4297f741d313acd0cc7e0afc5a32b56fb784a53eda7103eef153128134fdb9f6ee36faabb9e2f7e7a
- SSDEEP 12288:hn7o3IhmNYnLmobvpOF1sOAFnkZOw3+rt:6TCmobhe27FnkZU
- TLSH T1A0D48DA5E7A812F8E1B7D178C9530542E772BC460360ABCF039066B61F276E56E3F721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Stops running service(s)
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.