General
- Target 2026-07-09_98cbcaf386db506ed34a1d12e6d02abd_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 1.2MB
- Sample260709-mf4sashw2w
- SHA256 2f9cbab48dbc601c80c12305eaf63c471ba3296db508a9c1a046a149789f27f2
- MD5 98cbcaf386db506ed34a1d12e6d02abd
- SHA1 5ea9ab6e3ae09f7d0dea8f2981069d3838f83b8e
- SHA512 67bd8ab348c4d74482d0e1ab3d6413e4c76b9838e146fe8aecb04da45c014e15fb9aeeed63416e8cecba90bb3bb086a1e01d10c5c1fdbfd437039f7e9c10520e
- SSDEEP 24576:W/t6WkcM5o9c7dvPHgvw/l7Cn1IaEjeGKqw40t8wwusZe+:KyjfgvwtpBKqwNt5ye+
- TLSH T1D155AE05A79641EED4BBD0B4CA522A0FF5B2F8210239A77F9FE40E944F22B60973D715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-09_98cbcaf386db506ed34a1d12e6d02abd_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_98cbcaf386db506ed34a1d12e6d02abd_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 1.2MB
- SHA256 2f9cbab48dbc601c80c12305eaf63c471ba3296db508a9c1a046a149789f27f2
- MD5 98cbcaf386db506ed34a1d12e6d02abd
- SHA1 5ea9ab6e3ae09f7d0dea8f2981069d3838f83b8e
- SHA512 67bd8ab348c4d74482d0e1ab3d6413e4c76b9838e146fe8aecb04da45c014e15fb9aeeed63416e8cecba90bb3bb086a1e01d10c5c1fdbfd437039f7e9c10520e
- SSDEEP 24576:W/t6WkcM5o9c7dvPHgvw/l7Cn1IaEjeGKqw40t8wwusZe+:KyjfgvwtpBKqwNt5ye+
- TLSH T1D155AE05A79641EED4BBD0B4CA522A0FF5B2F8210239A77F9FE40E944F22B60973D715
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext