General
- Target 2026-07-20_e332b422cd4bb748f0cb0fb2708dd280_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 46.0MB
- Sample260720-kftk8aes7x
- SHA256 691c1df6e888e3658fff1f735ccf310b20b7ce25fb86542c4fdbf3c41665ec4f
- MD5 e332b422cd4bb748f0cb0fb2708dd280
- SHA1 1079a63f2adb355e71f2093fb7847351eb4a30c5
- SHA512 5a1d657641e4f21ce019e0978450cc1b5c4564f56a9eff35df79f4828dd79dd9a3347875dcf0917768a04e73519376f9ad56b209c0acbdf4642d130e344a4cd2
- SSDEEP 393216:Jz9acPaemDUSCMWtu2hsnoKEtKDengbdK7fVJf7CGVZBS9MgDKGo9QwJOsG1doxL:0RK9J7wb+iG8xm/
- TLSH T1FFB77C9673F441EAE1AED134C9678A37EAB1BC451430434B2560FB9BAF33660AD3D361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-20_e332b422cd4bb748f0cb0fb2708dd280_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_e332b422cd4bb748f0cb0fb2708dd280_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_e332b422cd4bb748f0cb0fb2708dd280_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 46.0MB
- SHA256 691c1df6e888e3658fff1f735ccf310b20b7ce25fb86542c4fdbf3c41665ec4f
- MD5 e332b422cd4bb748f0cb0fb2708dd280
- SHA1 1079a63f2adb355e71f2093fb7847351eb4a30c5
- SHA512 5a1d657641e4f21ce019e0978450cc1b5c4564f56a9eff35df79f4828dd79dd9a3347875dcf0917768a04e73519376f9ad56b209c0acbdf4642d130e344a4cd2
- SSDEEP 393216:Jz9acPaemDUSCMWtu2hsnoKEtKDengbdK7fVJf7CGVZBS9MgDKGo9QwJOsG1doxL:0RK9J7wb+iG8xm/
- TLSH T1FFB77C9673F441EAE1AED134C9678A37EAB1BC451430434B2560FB9BAF33660AD3D361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association