General
- Target 2026-07-08_33f37809547c0872a0cf605103b5b240_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- Sample260708-gz5wtacy5r
- SHA256 443162125d3506b2a815537cafbd3db7a76565440da847e1be2af257fe664cf1
- MD5 33f37809547c0872a0cf605103b5b240
- SHA1 460209d1b574f58a3a82ab96aac359536e6f10b7
- SHA512 751bd798a546301cd29c6782150344070d8feeccc514c23778803a03fe2c2f074e04d1eb3cc93ed1bcf125df27bc31f59d618b6ceb28ff0adc42ca652269b36b
- SSDEEP 49152:+o6vV686MxzKUsY/BECFPWK4JlPSpeW0MGm0Esy40kv9UGo9+DlqZlCUAKBVUNND:jDyHkUDsyerqvyjEVPslrgreXt2MMLm
- TLSH T1C0868C13F2A501ECD05ED974CF3A56329B317C4A4BB092EF269836E11A75ED47B38B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_33f37809547c0872a0cf605103b5b240_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_33f37809547c0872a0cf605103b5b240_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- SHA256 443162125d3506b2a815537cafbd3db7a76565440da847e1be2af257fe664cf1
- MD5 33f37809547c0872a0cf605103b5b240
- SHA1 460209d1b574f58a3a82ab96aac359536e6f10b7
- SHA512 751bd798a546301cd29c6782150344070d8feeccc514c23778803a03fe2c2f074e04d1eb3cc93ed1bcf125df27bc31f59d618b6ceb28ff0adc42ca652269b36b
- SSDEEP 49152:+o6vV686MxzKUsY/BECFPWK4JlPSpeW0MGm0Esy40kv9UGo9+DlqZlCUAKBVUNND:jDyHkUDsyerqvyjEVPslrgreXt2MMLm
- TLSH T1C0868C13F2A501ECD05ED974CF3A56329B317C4A4BB092EF269836E11A75ED47B38B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1