General
- Target 2026-07-15_4d3bab7d672878c904e1c5843a0ab589_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom_vidar
- Size 7.6MB
- Sample260716-cc7dxaes4z
- SHA256 60fe731ccf0b213f2c1874b1c01207d76d4b7aa64042ce1bb2d82a5365a0dd9c
- MD5 4d3bab7d672878c904e1c5843a0ab589
- SHA1 02921c16c4cad58ceb4ceae8d439b2d4947bf2f4
- SHA512 8f302e3c894de9a773ba9910bf3545577e185c1bf1561633f232a04f2c27b9dc295faf1b68b15d8073a4a826a363e03f4c1903d4a6ea59f99f8bd4b8253670c3
- SSDEEP 98304:1ViYonkH6+mEqXRgnny7VC0xrfCigo2SlMYm9tZV57wRGpj3:1oYXylMYm9LVNF9
- TLSH T116867C03F19611E8C05ED179875A9233AA71BC690B31B6EF0B5076162F7AFE06B3D760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_4d3bab7d672878c904e1c5843a0ab589_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_4d3bab7d672878c904e1c5843a0ab589_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom_vidar
- Size 7.6MB
- SHA256 60fe731ccf0b213f2c1874b1c01207d76d4b7aa64042ce1bb2d82a5365a0dd9c
- MD5 4d3bab7d672878c904e1c5843a0ab589
- SHA1 02921c16c4cad58ceb4ceae8d439b2d4947bf2f4
- SHA512 8f302e3c894de9a773ba9910bf3545577e185c1bf1561633f232a04f2c27b9dc295faf1b68b15d8073a4a826a363e03f4c1903d4a6ea59f99f8bd4b8253670c3
- SSDEEP 98304:1ViYonkH6+mEqXRgnny7VC0xrfCigo2SlMYm9tZV57wRGpj3:1oYXylMYm9LVNF9
- TLSH T116867C03F19611E8C05ED179875A9233AA71BC690B31B6EF0B5076162F7AFE06B3D760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1