General
- Target 2026-07-11_38932e1edc3a94df90e1a611a88966b4_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 25.9MB
- Sample260711-dmp32sds41
- SHA256 4132c8cb3ea3d1e2a21fa25f756d747f58171517350ca633d9f9afa63599f3ef
- MD5 38932e1edc3a94df90e1a611a88966b4
- SHA1 5df992e1baa6a99b9cd5867db7c143f9e7ee465d
- SHA512 6e5255e2c52ad12d9f7a98a679342b1f6dc911386731bf70a1b99784fe0c52d616a8df98628e2b18f8063082dbb017febb8dd89822a32ed2d8075cba9f22d12f
- SSDEEP 196608:R3SV8cTe5pU+7z/aplDCagDvznsEKCs6Nu3usz1c:R3SGccUgCp5CagDrn+zW
- TLSH T1F4572795B2A807D2F3A6D5344576A233E2B17C1E2762D23B0D38F50ADEB77802D19F25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-11_38932e1edc3a94df90e1a611a88966b4_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_38932e1edc3a94df90e1a611a88966b4_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_38932e1edc3a94df90e1a611a88966b4_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 25.9MB
- SHA256 4132c8cb3ea3d1e2a21fa25f756d747f58171517350ca633d9f9afa63599f3ef
- MD5 38932e1edc3a94df90e1a611a88966b4
- SHA1 5df992e1baa6a99b9cd5867db7c143f9e7ee465d
- SHA512 6e5255e2c52ad12d9f7a98a679342b1f6dc911386731bf70a1b99784fe0c52d616a8df98628e2b18f8063082dbb017febb8dd89822a32ed2d8075cba9f22d12f
- SSDEEP 196608:R3SV8cTe5pU+7z/aplDCagDvznsEKCs6Nu3usz1c:R3SGccUgCp5CagDrn+zW
- TLSH T1F4572795B2A807D2F3A6D5344576A233E2B17C1E2762D23B0D38F50ADEB77802D19F25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association