General
- Target 2026-07-13_50117e058ae7757765a56f8e0f76be71_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.7MB
- Sample260713-e3jrmsby7n
- SHA256 e2983e60f502da4ab5b13cfbc3e858f60589149d47d60a9dc29d20df37e51f3a
- MD5 50117e058ae7757765a56f8e0f76be71
- SHA1 2c9e2b303343538fcb16ef7fc009ad697275a61b
- SHA512 45f38c997a72c1b986b2ce331c890af9b6849c324b525058bb5a18c06a9506a2b825fb29fe38994a451eab2c32dbc7221e73df520647e993e918893780af5554
- SSDEEP 98304:5aytBxqFVdaUoNVaGaD1z4XNqq5tP7bnAyhV3+k:5BeVZkNl5lnh1+k
- TLSH T11EA66B13F29901D8E06ED578876A5232A972BC8A4B30B2DF3A5C76251F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_50117e058ae7757765a56f8e0f76be71_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_50117e058ae7757765a56f8e0f76be71_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.7MB
- SHA256 e2983e60f502da4ab5b13cfbc3e858f60589149d47d60a9dc29d20df37e51f3a
- MD5 50117e058ae7757765a56f8e0f76be71
- SHA1 2c9e2b303343538fcb16ef7fc009ad697275a61b
- SHA512 45f38c997a72c1b986b2ce331c890af9b6849c324b525058bb5a18c06a9506a2b825fb29fe38994a451eab2c32dbc7221e73df520647e993e918893780af5554
- SSDEEP 98304:5aytBxqFVdaUoNVaGaD1z4XNqq5tP7bnAyhV3+k:5BeVZkNl5lnh1+k
- TLSH T11EA66B13F29901D8E06ED578876A5232A972BC8A4B30B2DF3A5C76251F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory