General
- Target 2026-07-12_55267b6e33c6d1d41d6d75d19902bdeb_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.8MB
- Sample260712-qf4dbaav6n
- SHA256 720af3bee4b7e9ca136659e1f49657077d9f9f51e095cb2b28d23e0eef10d94f
- MD5 55267b6e33c6d1d41d6d75d19902bdeb
- SHA1 2c0141ae0b24300e8f85c5986ab7bb3a812f1477
- SHA512 dbe4058eff658021faed3d35024fc958f5b01e967083c2acf2a18d16f085da268339892b7a4175d5ff66beb2982f75c149705a6024da6b0ba804c21eb9a847d7
- SSDEEP 98304:1cm/kUJ97b2sPep0mYDkbEe/37uXw0wAoIwllq98GC9KJdys/hL:1/1DmJ9lTd61
- TLSH T1E4868C13F19E11E8C05ED179876A9232AA71BC494B31B2EF0B9077112F7AEE06B3D754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_55267b6e33c6d1d41d6d75d19902bdeb_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_55267b6e33c6d1d41d6d75d19902bdeb_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.8MB
- SHA256 720af3bee4b7e9ca136659e1f49657077d9f9f51e095cb2b28d23e0eef10d94f
- MD5 55267b6e33c6d1d41d6d75d19902bdeb
- SHA1 2c0141ae0b24300e8f85c5986ab7bb3a812f1477
- SHA512 dbe4058eff658021faed3d35024fc958f5b01e967083c2acf2a18d16f085da268339892b7a4175d5ff66beb2982f75c149705a6024da6b0ba804c21eb9a847d7
- SSDEEP 98304:1cm/kUJ97b2sPep0mYDkbEe/37uXw0wAoIwllq98GC9KJdys/hL:1/1DmJ9lTd61
- TLSH T1E4868C13F19E11E8C05ED179876A9232AA71BC494B31B2EF0B9077112F7AEE06B3D754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1