General
- Target 2026-07-09_efe89f4acc326ab56c2607f2707c9ec8_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- Sample260709-jmfghaet3k
- SHA256 6dd6b718901717a43df68130082596371cabc55ffbccf4558d1ad307df157f62
- MD5 efe89f4acc326ab56c2607f2707c9ec8
- SHA1 36a63aac8ebee36aebed54ddce48245633d565a4
- SHA512 e1d4257a74b74d18b29d378c89b49ee01e650122e269d802acec4cdd153433680aeb6802487998bd2e42bd053f19ba8b248441c4c4d9c3138d8582842b9243a1
- SSDEEP 98304:bDyHkUDsyeWqvyjEVPslrgreXt3AM7wRGpj3:bmHRee0GNAIF9
- TLSH T1D6868C13F2A501ECD05ED974CF3A56329B317C4A4BB092EF269836E11A75ED47B38B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_efe89f4acc326ab56c2607f2707c9ec8_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_efe89f4acc326ab56c2607f2707c9ec8_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- SHA256 6dd6b718901717a43df68130082596371cabc55ffbccf4558d1ad307df157f62
- MD5 efe89f4acc326ab56c2607f2707c9ec8
- SHA1 36a63aac8ebee36aebed54ddce48245633d565a4
- SHA512 e1d4257a74b74d18b29d378c89b49ee01e650122e269d802acec4cdd153433680aeb6802487998bd2e42bd053f19ba8b248441c4c4d9c3138d8582842b9243a1
- SSDEEP 98304:bDyHkUDsyeWqvyjEVPslrgreXt3AM7wRGpj3:bmHRee0GNAIF9
- TLSH T1D6868C13F2A501ECD05ED974CF3A56329B317C4A4BB092EF269836E11A75ED47B38B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1