General
- Target 2026-07-10_8e7e42046887db7be499c9d12f6b2ca9_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 1.6MB
- Sample260710-rglekaay8l
- SHA256 f70e841ef036d74adcd07c74a376652763433d5942a13b3d19bc776624c87a22
- MD5 8e7e42046887db7be499c9d12f6b2ca9
- SHA1 a63bd467c9173e30c6f80c2f761ed5d08f21abcd
- SHA512 c0b67ffa70892311503e67c6ac4f2c6c4d5e6503262a9f5d2c9ca361931dc2beca349defad27335e0104d6c822c222c72f8ede9c4451da2f2f07c07de0aa71f8
- SSDEEP 24576:KRS678AszPshmLXDQeR74F66JhAbKnR4qqNrRkAZYFVHhoodcE/249Dz8mlh:vq88oodj2gzp
- TLSH T16275D647EBB651E4D8FAD1399662722BBC71385983349BD797408A074B62FF0E93E340
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-10_8e7e42046887db7be499c9d12f6b2ca9_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_8e7e42046887db7be499c9d12f6b2ca9_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_8e7e42046887db7be499c9d12f6b2ca9_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 1.6MB
- SHA256 f70e841ef036d74adcd07c74a376652763433d5942a13b3d19bc776624c87a22
- MD5 8e7e42046887db7be499c9d12f6b2ca9
- SHA1 a63bd467c9173e30c6f80c2f761ed5d08f21abcd
- SHA512 c0b67ffa70892311503e67c6ac4f2c6c4d5e6503262a9f5d2c9ca361931dc2beca349defad27335e0104d6c822c222c72f8ede9c4451da2f2f07c07de0aa71f8
- SSDEEP 24576:KRS678AszPshmLXDQeR74F66JhAbKnR4qqNrRkAZYFVHhoodcE/249Dz8mlh:vq88oodj2gzp
- TLSH T16275D647EBB651E4D8FAD1399662722BBC71385983349BD797408A074B62FF0E93E340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Accesses cryptocurrency files/wallets, possible credential harvesting