General
- Target 2026-07-23_9f86e953029af44abc0a77939366bc1c_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- Sample260723-j9mt4ayydv
- SHA256 4223986c00d4b4962918e1822cac4b2aee13c0652befe496a8b24aef7c93b7de
- MD5 9f86e953029af44abc0a77939366bc1c
- SHA1 5879530d9c6a38d3bdc8a9a8f644642cb8c7b024
- SHA512 63354a921c402ef4f31b3f2918216ad97fd348a4d41e2f216c3b14cfa368671e3472938db1554690f8727c2379ab666ead20c514da9dc03e1c413bc864b27ec5
- SSDEEP 98304:LEwv6ovodefiN5vKr3Aj5OA4u3apaI3gtOD527BWG:LLvXvRg5dQAFIQYVQBWG
- TLSH T1A7868C13F2A501ECD05ED974CF3A52329B357C4A8BB092EF169836E11A75ED47B38B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_9f86e953029af44abc0a77939366bc1c_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_9f86e953029af44abc0a77939366bc1c_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- SHA256 4223986c00d4b4962918e1822cac4b2aee13c0652befe496a8b24aef7c93b7de
- MD5 9f86e953029af44abc0a77939366bc1c
- SHA1 5879530d9c6a38d3bdc8a9a8f644642cb8c7b024
- SHA512 63354a921c402ef4f31b3f2918216ad97fd348a4d41e2f216c3b14cfa368671e3472938db1554690f8727c2379ab666ead20c514da9dc03e1c413bc864b27ec5
- SSDEEP 98304:LEwv6ovodefiN5vKr3Aj5OA4u3apaI3gtOD527BWG:LLvXvRg5dQAFIQYVQBWG
- TLSH T1A7868C13F2A501ECD05ED974CF3A52329B357C4A8BB092EF169836E11A75ED47B38B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1