General
- Target 2026-07-09_f4ceb14101025032abbd28e5d74ae3e8_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 5.2MB
- Sample260709-b5bx2abt8n
- SHA256 6f7785fd3ecb05aa415f5795806ccf01f18ee5b16f08403bc4d8e423109ac359
- MD5 f4ceb14101025032abbd28e5d74ae3e8
- SHA1 0024ffd42f3b2f85099c688920b012e9297dd8eb
- SHA512 fdcc722d6084b11fcfcb4d29de50fbad0997a912e9d196e216ca03b8d78aff0203ed76d5cacd746bd6024eecc650d2c2ae59f2b6b8b698e4fa5e6731d561ac70
- SSDEEP 49152:/3vQUduHc2YAA8cI51xYIQSnZiYuHguJmE8nbsMlU+/teeJDDSoc2CGnCmU4mprF:zBD4H/4gfEY9xHhyQU4MrUNVs
- TLSH T112465B97F29511E9C41EC874CF1D942297247C8E47F1A3EF29E836E11A36AD87B39B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_f4ceb14101025032abbd28e5d74ae3e8_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_f4ceb14101025032abbd28e5d74ae3e8_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 5.2MB
- SHA256 6f7785fd3ecb05aa415f5795806ccf01f18ee5b16f08403bc4d8e423109ac359
- MD5 f4ceb14101025032abbd28e5d74ae3e8
- SHA1 0024ffd42f3b2f85099c688920b012e9297dd8eb
- SHA512 fdcc722d6084b11fcfcb4d29de50fbad0997a912e9d196e216ca03b8d78aff0203ed76d5cacd746bd6024eecc650d2c2ae59f2b6b8b698e4fa5e6731d561ac70
- SSDEEP 49152:/3vQUduHc2YAA8cI51xYIQSnZiYuHguJmE8nbsMlU+/teeJDDSoc2CGnCmU4mprF:zBD4H/4gfEY9xHhyQU4MrUNVs
- TLSH T112465B97F29511E9C41EC874CF1D942297247C8E47F1A3EF29E836E11A36AD87B39B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory