General
- Target 2026-07-09_95bb985eda6c5205299eb6e3a9295e6d_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 377KB
- Sample260709-j4fhtsey5k
- SHA256 40a6d3bc561fb59e62b91910a7f82501e799aace35cf22643e576187083204ca
- MD5 95bb985eda6c5205299eb6e3a9295e6d
- SHA1 d86d345735e2a55863abd2ca229bb39baacba810
- SHA512 d891c52da31046efd600448a26cc6a2ea0b4632dd19eda51bcd0a9047dfed5ce686a5122c37ef60da278a1ae535bfbabeda2e71a1e4beb0ed76f55fa2ea12cc5
- SSDEEP 6144:p+GYnA0zeWiDi5eJHQ8kV3f+RysMFZzN/JAOtb22bvtB8sNrw:pYkDi5eJQ7uysMFZzN/JJbVX1
- TLSH T1D6848C16F79408FDD493C574C9964686DA29BC8E0B71EEDF1798462A2F237F04E39B20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-09_95bb985eda6c5205299eb6e3a9295e6d_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_95bb985eda6c5205299eb6e3a9295e6d_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260706-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_95bb985eda6c5205299eb6e3a9295e6d_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 377KB
- SHA256 40a6d3bc561fb59e62b91910a7f82501e799aace35cf22643e576187083204ca
- MD5 95bb985eda6c5205299eb6e3a9295e6d
- SHA1 d86d345735e2a55863abd2ca229bb39baacba810
- SHA512 d891c52da31046efd600448a26cc6a2ea0b4632dd19eda51bcd0a9047dfed5ce686a5122c37ef60da278a1ae535bfbabeda2e71a1e4beb0ed76f55fa2ea12cc5
- SSDEEP 6144:p+GYnA0zeWiDi5eJHQ8kV3f+RysMFZzN/JAOtb22bvtB8sNrw:pYkDi5eJQ7uysMFZzN/JJbVX1
- TLSH T1D6848C16F79408FDD493C574C9964686DA29BC8E0B71EEDF1798462A2F237F04E39B20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association