General
- Target 2026-07-08_3dd0e057361f80e29ac051891f6681ac_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.5MB
- Sample260708-lyjdmsd17w
- SHA256 8b877f21189be60e7845a2f29dce7fab16bd6e1ad2b626f242f000eb80c402a7
- MD5 3dd0e057361f80e29ac051891f6681ac
- SHA1 a094c558274492e0e17a49cced0bcdc934d9dfc3
- SHA512 a9214818a7f7b7500bd1bc00a88d4042ba249ae6aadf739d68b6852d74a17e2d04bd91fba1d2bb36c863d5919fa8d9c7c9fb42532f7ec8a759e144016733859c
- SSDEEP 98304:saytBxqFVdaUoNVaGaz1z4XNqq5tP7bnAyhV6:sBeV5kNl5lnh
- TLSH T1FEA65B13F29901D8E06AD578876A5232A972BC864B30B2DF365C361E1F76FE15B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_3dd0e057361f80e29ac051891f6681ac_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_3dd0e057361f80e29ac051891f6681ac_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.5MB
- SHA256 8b877f21189be60e7845a2f29dce7fab16bd6e1ad2b626f242f000eb80c402a7
- MD5 3dd0e057361f80e29ac051891f6681ac
- SHA1 a094c558274492e0e17a49cced0bcdc934d9dfc3
- SHA512 a9214818a7f7b7500bd1bc00a88d4042ba249ae6aadf739d68b6852d74a17e2d04bd91fba1d2bb36c863d5919fa8d9c7c9fb42532f7ec8a759e144016733859c
- SSDEEP 98304:saytBxqFVdaUoNVaGaz1z4XNqq5tP7bnAyhV6:sBeV5kNl5lnh
- TLSH T1FEA65B13F29901D8E06AD578876A5232A972BC864B30B2DF365C361E1F76FE15B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables taskbar notifications via registry modification
-
Executes dropped EXE
-
Windows security modification
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory