General
- Target 2026-07-22_47daf6f1754390880ce35f8069fbdc6a_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.6MB
- Sample260722-a4asxaha96
- SHA256 5892cbc13929f9b0f7e19b17f3b389d357507c186e9d35a635d8f660042a3459
- MD5 47daf6f1754390880ce35f8069fbdc6a
- SHA1 c5f515f4ce3012dda690f9cccacd2c1f60e37512
- SHA512 123bca03e658f6da4513bc8846574d1d84c2cf8601254432c26cd715de2c07841cda487e3c6d2428922d9a8d2c610ef6d548a21451c6095ce65cbc6197e4a1f0
- SSDEEP 98304:ESpbOrf4DgU6vBELOnTWPBx6wRfQKiKkKURgyLjR+gEiWyssUhVED527BWG:HZOr1WoWnRFQRpEqsFh6VQBWG
- TLSH T1D4A67C23F29501D9E16ED1788B6A5232A972BC8A4B30B2DF3A4C76151F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_47daf6f1754390880ce35f8069fbdc6a_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_47daf6f1754390880ce35f8069fbdc6a_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.6MB
- SHA256 5892cbc13929f9b0f7e19b17f3b389d357507c186e9d35a635d8f660042a3459
- MD5 47daf6f1754390880ce35f8069fbdc6a
- SHA1 c5f515f4ce3012dda690f9cccacd2c1f60e37512
- SHA512 123bca03e658f6da4513bc8846574d1d84c2cf8601254432c26cd715de2c07841cda487e3c6d2428922d9a8d2c610ef6d548a21451c6095ce65cbc6197e4a1f0
- SSDEEP 98304:ESpbOrf4DgU6vBELOnTWPBx6wRfQKiKkKURgyLjR+gEiWyssUhVED527BWG:HZOr1WoWnRFQRpEqsFh6VQBWG
- TLSH T1D4A67C23F29501D9E16ED1788B6A5232A972BC8A4B30B2DF3A4C76151F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory