General
- Target 2026-07-21_8c0ee6f46664479a104f1931789d27d4_cobalt-strike_glassworm_icedid_mespinoza_njrat_ryuk_vidar
- Size 2.9MB
- Sample260721-c1mdmses3w
- SHA256 9b100fc537e094425c1c9769476ee2dfbe0d69031c5441f7f2e0c3a55826cfd0
- MD5 8c0ee6f46664479a104f1931789d27d4
- SHA1 06cba13c45fd75fe0d5c1e5c7a5fbef48994a264
- SHA512 5a9023d03afd7c7610474404135958cb5aa0ab217fa693ee1d0d0e2f6902d43c425affcba5cd563716c8c9c073d791c40d5d9ac02af839f86b6a88cd416b3830
- SSDEEP 49152:OHynn/PH24bNfva/YrGOukXWoylSgxpZjyjVfveTSMyW5orQ+tI65RJzGc5ZId3B:vhR0YbilnpByjVfveTSMyW5orQ+tI65E
- TLSH T167E59D47A3F400E8D267C279C5165617EBB2B4651B3097DF06E4C67A2F23EE25A7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_8c0ee6f46664479a104f1931789d27d4_cobalt-strike_glassworm_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_8c0ee6f46664479a104f1931789d27d4_cobalt-strike_glassworm_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win11ltsc2024-20260710-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_8c0ee6f46664479a104f1931789d27d4_cobalt-strike_glassworm_icedid_mespinoza_njrat_ryuk_vidar
- Size 2.9MB
- SHA256 9b100fc537e094425c1c9769476ee2dfbe0d69031c5441f7f2e0c3a55826cfd0
- MD5 8c0ee6f46664479a104f1931789d27d4
- SHA1 06cba13c45fd75fe0d5c1e5c7a5fbef48994a264
- SHA512 5a9023d03afd7c7610474404135958cb5aa0ab217fa693ee1d0d0e2f6902d43c425affcba5cd563716c8c9c073d791c40d5d9ac02af839f86b6a88cd416b3830
- SSDEEP 49152:OHynn/PH24bNfva/YrGOukXWoylSgxpZjyjVfveTSMyW5orQ+tI65RJzGc5ZId3B:vhR0YbilnpByjVfveTSMyW5orQ+tI65E
- TLSH T167E59D47A3F400E8D267C279C5165617EBB2B4651B3097DF06E4C67A2F23EE25A7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Drops desktop.ini file(s)