General
- Target 2026-07-10_a74b00c27ca67b72acb67097260ecf66_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- Sample260710-grygrsdz5p
- SHA256 0aad6d569565f5131263586a7f677fe7a650849587517b41cde737332e42e5c7
- MD5 a74b00c27ca67b72acb67097260ecf66
- SHA1 63958d9c34b6b6e9b8d0f751188d1db82556e8e8
- SHA512 b3355d92079d6fb17f9c2d38468d03303fa2ed0a3763910c5d73d060fa19030f5ae81fe72d7f260a443b3bad72491fc70f9316e4458ce47936b10314a6118c2e
- SSDEEP 98304:/DJHkUDsyeWqvyjEVPslrgreXKHWN7wRGpj3:/tHRee0GsWxF9
- TLSH T119868C13F2A501ECD05ED974CF3A56329B317C4A4BB092EF269836E11A75ED47B38B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_a74b00c27ca67b72acb67097260ecf66_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_a74b00c27ca67b72acb67097260ecf66_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- SHA256 0aad6d569565f5131263586a7f677fe7a650849587517b41cde737332e42e5c7
- MD5 a74b00c27ca67b72acb67097260ecf66
- SHA1 63958d9c34b6b6e9b8d0f751188d1db82556e8e8
- SHA512 b3355d92079d6fb17f9c2d38468d03303fa2ed0a3763910c5d73d060fa19030f5ae81fe72d7f260a443b3bad72491fc70f9316e4458ce47936b10314a6118c2e
- SSDEEP 98304:/DJHkUDsyeWqvyjEVPslrgreXKHWN7wRGpj3:/tHRee0GsWxF9
- TLSH T119868C13F2A501ECD05ED974CF3A56329B317C4A4BB092EF269836E11A75ED47B38B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1