General
- Target 2026-07-12_1e24aa2de74ad5fef4394aaf96a462c5_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.7MB
- Sample260712-reffjadt4y
- SHA256 b95e2691aba9bed203e9e620d7615558c9956d11ae8f7748412fe0d70d0d3f6a
- MD5 1e24aa2de74ad5fef4394aaf96a462c5
- SHA1 22964de65f2442e908301df59f365a33e7fc76e4
- SHA512 7bbf1ceab0134c6f7dceb3cc6f9f51d7e0dfaf01245aa4b7e2849ea95cc5e3302fe16ed54f4c8cb5ac8eaadd1dca57fd73129cca19e1dedadcb6247a037c68d7
- SSDEEP 98304:PaytBxqFVdaUoNVaGaB1z4XNqq5tP7bnAyhVPB2Yyjl:PBeVjkNl5lnh9Z
- TLSH T12CA66B13F29901D8E06ED5788B6A5232A972BC8A4B30B2DF3A5C76151F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_1e24aa2de74ad5fef4394aaf96a462c5_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_1e24aa2de74ad5fef4394aaf96a462c5_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.7MB
- SHA256 b95e2691aba9bed203e9e620d7615558c9956d11ae8f7748412fe0d70d0d3f6a
- MD5 1e24aa2de74ad5fef4394aaf96a462c5
- SHA1 22964de65f2442e908301df59f365a33e7fc76e4
- SHA512 7bbf1ceab0134c6f7dceb3cc6f9f51d7e0dfaf01245aa4b7e2849ea95cc5e3302fe16ed54f4c8cb5ac8eaadd1dca57fd73129cca19e1dedadcb6247a037c68d7
- SSDEEP 98304:PaytBxqFVdaUoNVaGaB1z4XNqq5tP7bnAyhVPB2Yyjl:PBeVjkNl5lnh9Z
- TLSH T12CA66B13F29901D8E06ED5788B6A5232A972BC8A4B30B2DF3A5C76151F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1