General
- Target 2026-07-08_ac4c2f26d5e9dcfcd51539ae336e3413_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 46.0MB
- Sample260708-ctkapsat5n
- SHA256 65bd7c0f4cf73612350519c97eb40fd7da23d036446852b59e1dea86268008e4
- MD5 ac4c2f26d5e9dcfcd51539ae336e3413
- SHA1 c886ba473aae7c16676daeb6192433eebd2468bc
- SHA512 dd1f6fe048cfca648604d85606a1cbd13263eb7f67bc8666a278a10a86ed8cc63279f168bb50d6d630c0b85ad261b17ad7b7cabe9bd2ca804a9c2f5546c94ce9
- SSDEEP 393216:Qz9acPaemDUSCMWtu2hsnoKEtKDengbdK7fVJf7CGVZBS9MgDKGo9QwJOsG1doxL:fRK9J7wb+iG8xm/
- TLSH T195B77C9673F441EAE1AED134C9678A37EAB1BC451430434B2560FB9BAF33660AD3D361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-08_ac4c2f26d5e9dcfcd51539ae336e3413_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_ac4c2f26d5e9dcfcd51539ae336e3413_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260706-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_ac4c2f26d5e9dcfcd51539ae336e3413_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 46.0MB
- SHA256 65bd7c0f4cf73612350519c97eb40fd7da23d036446852b59e1dea86268008e4
- MD5 ac4c2f26d5e9dcfcd51539ae336e3413
- SHA1 c886ba473aae7c16676daeb6192433eebd2468bc
- SHA512 dd1f6fe048cfca648604d85606a1cbd13263eb7f67bc8666a278a10a86ed8cc63279f168bb50d6d630c0b85ad261b17ad7b7cabe9bd2ca804a9c2f5546c94ce9
- SSDEEP 393216:Qz9acPaemDUSCMWtu2hsnoKEtKDengbdK7fVJf7CGVZBS9MgDKGo9QwJOsG1doxL:fRK9J7wb+iG8xm/
- TLSH T195B77C9673F441EAE1AED134C9678A37EAB1BC451430434B2560FB9BAF33660AD3D361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association