General
- Target 2026-07-18_8ba9aea93f222c139c9794d1842c65fe_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.3MB
- Sample260718-h147caby4r
- SHA256 9c784d38dd58f4c0ca53fc0ebd820c3b9a4786d6cb76ece0e6c08e6a0e559ec3
- MD5 8ba9aea93f222c139c9794d1842c65fe
- SHA1 d390a934ff0b16f5bbcef407df5ee46edea892da
- SHA512 92e9209ca8e62834c9a3edba5f6e0973f1053f23f974bbf494deeb5b0bed58b332b691a069a385dceb3014ad6c60273e567dce24f7ab8e0c94d6e0f9983bd9a0
- SSDEEP 49152:yK/N8UYVl4oVFNlU4zpRZ2rIz5AnDsLHncEsHXQlDLgUIIz2HcaGMyALc1XmzPrD:rN4XhbDa3Qvmg/1sx7wRGpj3
- TLSH T1A1269D03F1DA41D8C01ED1B9870A8632AAA1BC456B35B6DF079177162F7AEE49F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_8ba9aea93f222c139c9794d1842c65fe_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_8ba9aea93f222c139c9794d1842c65fe_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.3MB
- SHA256 9c784d38dd58f4c0ca53fc0ebd820c3b9a4786d6cb76ece0e6c08e6a0e559ec3
- MD5 8ba9aea93f222c139c9794d1842c65fe
- SHA1 d390a934ff0b16f5bbcef407df5ee46edea892da
- SHA512 92e9209ca8e62834c9a3edba5f6e0973f1053f23f974bbf494deeb5b0bed58b332b691a069a385dceb3014ad6c60273e567dce24f7ab8e0c94d6e0f9983bd9a0
- SSDEEP 49152:yK/N8UYVl4oVFNlU4zpRZ2rIz5AnDsLHncEsHXQlDLgUIIz2HcaGMyALc1XmzPrD:rN4XhbDa3Qvmg/1sx7wRGpj3
- TLSH T1A1269D03F1DA41D8C01ED1B9870A8632AAA1BC456B35B6DF079177162F7AEE49F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory