General
- Target 2026-07-07_2862d183f70d1f68639220c0dc9cfde3_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.7MB
- Sample260707-tx63baat8r
- SHA256 1c4fedacf492d1e65c582b4dde9b3828c4bd2a89c295be2052517a667a53c84a
- MD5 2862d183f70d1f68639220c0dc9cfde3
- SHA1 866b36a881083fd649f429631c9599120bd4c8cc
- SHA512 a5d92754db783a46fe43cf69e72dfe59449546602225f264130a4aca7be86f14a46927c503cb2768ab946965551e94c4795662ebd20242485c00c887bf977883
- SSDEEP 98304:XaytBxqFVdaUoNVaGaB1z4XNqq5tP7bnAyhVKLm:XBeVjkNl5lnhAL
- TLSH T19EA66B13F29901D8E06ED5788B6A5232A972BC8A4B30B2DF3A5C76151F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_2862d183f70d1f68639220c0dc9cfde3_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_2862d183f70d1f68639220c0dc9cfde3_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.7MB
- SHA256 1c4fedacf492d1e65c582b4dde9b3828c4bd2a89c295be2052517a667a53c84a
- MD5 2862d183f70d1f68639220c0dc9cfde3
- SHA1 866b36a881083fd649f429631c9599120bd4c8cc
- SHA512 a5d92754db783a46fe43cf69e72dfe59449546602225f264130a4aca7be86f14a46927c503cb2768ab946965551e94c4795662ebd20242485c00c887bf977883
- SSDEEP 98304:XaytBxqFVdaUoNVaGaB1z4XNqq5tP7bnAyhVKLm:XBeVjkNl5lnhAL
- TLSH T19EA66B13F29901D8E06ED5788B6A5232A972BC8A4B30B2DF3A5C76151F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1