General
- Target 2026-07-14_ba266bb39a102b6d583608fce6148e46_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.7MB
- Sample260714-lr5cjacx4z
- SHA256 a5c29b7881380de7afe26635452b8d8a9483b893a493c9d8a31a6a3e7bbd3877
- MD5 ba266bb39a102b6d583608fce6148e46
- SHA1 22942b16b777c13a1d9686a8f21b93058f13cb63
- SHA512 0983208c7fc160f40c1ec74cf7c0efa50b8ff0cafa41bac3541a1260e5582f9e47953d071f0d322766f075fb314b6d7ab1e8d19377440b914e194a69970e80b0
- SSDEEP 98304:jaytBxqFVdaUoNVaGa+1z4XNqq5tP7bnAyhVg0:jBeV4kNl5lnh
- TLSH T1ACA66B13F29901D8E06ED5788B6A5232A972BC8A4B30B2DF3A5C76151F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_ba266bb39a102b6d583608fce6148e46_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_ba266bb39a102b6d583608fce6148e46_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.7MB
- SHA256 a5c29b7881380de7afe26635452b8d8a9483b893a493c9d8a31a6a3e7bbd3877
- MD5 ba266bb39a102b6d583608fce6148e46
- SHA1 22942b16b777c13a1d9686a8f21b93058f13cb63
- SHA512 0983208c7fc160f40c1ec74cf7c0efa50b8ff0cafa41bac3541a1260e5582f9e47953d071f0d322766f075fb314b6d7ab1e8d19377440b914e194a69970e80b0
- SSDEEP 98304:jaytBxqFVdaUoNVaGa+1z4XNqq5tP7bnAyhVg0:jBeV4kNl5lnh
- TLSH T1ACA66B13F29901D8E06ED5788B6A5232A972BC8A4B30B2DF3A5C76151F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1