General
- Target 2026-07-22_41e2e86d8baea1d4b1ef242edd8c8a6d_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 21.2MB
- Sample260723-cbjw8afb34
- SHA256 2ee73f19b59580334490386fe7782fea73e27f01b1358df2caf625322df40060
- MD5 41e2e86d8baea1d4b1ef242edd8c8a6d
- SHA1 7ae94d8ab18509a7136e42122aab022087e57bb8
- SHA512 4b383d27f46136fb28df6fed197eddb033185c514e4eb25f1a73ba75fe3f44aa4b4ed7a71728d97e90d687d8c06b46c5eff661fff789b8579beadaebaa404000
- SSDEEP 393216:FiUkOoL6XM+JibXJmymNCsjoQ2Nvc9FHAH7CnoNiBRU/TuOfWUkwoB/fylhUoONq:esFibbmNCsjodRFCoNinXOfWUIB/eiZc
- TLSH T14327AF12A2B890E3F54A1831464FF7666AADAF340435904BE3173ECDED77583E91A393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-22_41e2e86d8baea1d4b1ef242edd8c8a6d_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_41e2e86d8baea1d4b1ef242edd8c8a6d_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_41e2e86d8baea1d4b1ef242edd8c8a6d_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 21.2MB
- SHA256 2ee73f19b59580334490386fe7782fea73e27f01b1358df2caf625322df40060
- MD5 41e2e86d8baea1d4b1ef242edd8c8a6d
- SHA1 7ae94d8ab18509a7136e42122aab022087e57bb8
- SHA512 4b383d27f46136fb28df6fed197eddb033185c514e4eb25f1a73ba75fe3f44aa4b4ed7a71728d97e90d687d8c06b46c5eff661fff789b8579beadaebaa404000
- SSDEEP 393216:FiUkOoL6XM+JibXJmymNCsjoQ2Nvc9FHAH7CnoNiBRU/TuOfWUkwoB/fylhUoONq:esFibbmNCsjodRFCoNinXOfWUIB/eiZc
- TLSH T14327AF12A2B890E3F54A1831464FF7666AADAF340435904BE3173ECDED77583E91A393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association