General
- Target 2026-07-20_fc47227dd1cf7bb12cbb3a3998293cf9_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 46.4MB
- Sample260720-j9avjadz4v
- SHA256 278c1e9008e3f30f96444101bcc56cc98a2a7449f9c25bdf5924f9a2e6420ff4
- MD5 fc47227dd1cf7bb12cbb3a3998293cf9
- SHA1 6a93a6031090e45d2806513da5ac28c386328078
- SHA512 e2515e74b1176107927c2ae15d6871fe9085d9fbfe7b11ee206ea7292076aad5cef07c81bf6dcfc0adcd5bd334f0d6ffdbb9c8eb5992cfde8538f882fa834f4a
- SSDEEP 393216:kz9acPaemDUSCMWtu2hsnoKEtKDengbdK7fVJf7CGVZBS9MgDKGo9QwJOsG1doxw:TRK9J7wb+iG8xmM
- TLSH T191B77C9673F441EAE1AED134C9678A37EAB1BC451430434B2560FB9BAF33660AD3D361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-20_fc47227dd1cf7bb12cbb3a3998293cf9_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_fc47227dd1cf7bb12cbb3a3998293cf9_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_fc47227dd1cf7bb12cbb3a3998293cf9_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 46.4MB
- SHA256 278c1e9008e3f30f96444101bcc56cc98a2a7449f9c25bdf5924f9a2e6420ff4
- MD5 fc47227dd1cf7bb12cbb3a3998293cf9
- SHA1 6a93a6031090e45d2806513da5ac28c386328078
- SHA512 e2515e74b1176107927c2ae15d6871fe9085d9fbfe7b11ee206ea7292076aad5cef07c81bf6dcfc0adcd5bd334f0d6ffdbb9c8eb5992cfde8538f882fa834f4a
- SSDEEP 393216:kz9acPaemDUSCMWtu2hsnoKEtKDengbdK7fVJf7CGVZBS9MgDKGo9QwJOsG1doxw:TRK9J7wb+iG8xmM
- TLSH T191B77C9673F441EAE1AED134C9678A37EAB1BC451430434B2560FB9BAF33660AD3D361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association