General
- Target 2026-07-08_7aab2ec67407b15c5e9c0847a0290b9a_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.7MB
- Sample260708-3sx4aabw2s
- SHA256 0c434ede58aae1dcba64a497e2f17d07daf309c31e0d49e2f511de9dffa08f22
- MD5 7aab2ec67407b15c5e9c0847a0290b9a
- SHA1 452b533b425a6c998630c3dfd7601f9e5cfbba47
- SHA512 a806632454a6cc64421c588cd6c96bec0ba640da0744b01754a586d0db9f70bba83e2fa6b3a287b96baea6541d4619967ac015e2698483dbe282d7361aab4309
- SSDEEP 98304:3aytBxqFVdaUoNVaGaB1z4XNqq5tP7bnAyhVHTjYvH:3BeVjkNl5lnhlv
- TLSH T1CBA66B13F29901D8E06ED578876A5232A972BC8A4B30B2DF3A5C76251F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_7aab2ec67407b15c5e9c0847a0290b9a_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_7aab2ec67407b15c5e9c0847a0290b9a_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.7MB
- SHA256 0c434ede58aae1dcba64a497e2f17d07daf309c31e0d49e2f511de9dffa08f22
- MD5 7aab2ec67407b15c5e9c0847a0290b9a
- SHA1 452b533b425a6c998630c3dfd7601f9e5cfbba47
- SHA512 a806632454a6cc64421c588cd6c96bec0ba640da0744b01754a586d0db9f70bba83e2fa6b3a287b96baea6541d4619967ac015e2698483dbe282d7361aab4309
- SSDEEP 98304:3aytBxqFVdaUoNVaGaB1z4XNqq5tP7bnAyhVHTjYvH:3BeVjkNl5lnhlv
- TLSH T1CBA66B13F29901D8E06ED578876A5232A972BC8A4B30B2DF3A5C76251F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory