General
- Target 2026-07-23_7de08a5f1e9146a843b7be0551c0034c_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- Sample260723-jnf5esac43
- SHA256 c9738fd192e6386e0eb6041b3faf6d8118af6868632772e7d3b767470a526938
- MD5 7de08a5f1e9146a843b7be0551c0034c
- SHA1 52c6574df4a31c8d8578ee2011c777b984c59347
- SHA512 4aa47c2f1bd6e34f0ba1e0bbf3b8da40cada9116be2825599082a8e5ed30b3683824b6c67472b141f14899b0bb507d9367b0df5266adda6ee957ccdf4844ca27
- SSDEEP 98304:8rzXpkF0J99JITGW45jxvdz4uzBMeD527BWG:8/CFE7I4fBMeVQBWG
- TLSH T147868C13F2A501ECD05ED974CF3A56329A317C4A4BB092EF269836E11A75ED47B3CB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_7de08a5f1e9146a843b7be0551c0034c_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_7de08a5f1e9146a843b7be0551c0034c_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- SHA256 c9738fd192e6386e0eb6041b3faf6d8118af6868632772e7d3b767470a526938
- MD5 7de08a5f1e9146a843b7be0551c0034c
- SHA1 52c6574df4a31c8d8578ee2011c777b984c59347
- SHA512 4aa47c2f1bd6e34f0ba1e0bbf3b8da40cada9116be2825599082a8e5ed30b3683824b6c67472b141f14899b0bb507d9367b0df5266adda6ee957ccdf4844ca27
- SSDEEP 98304:8rzXpkF0J99JITGW45jxvdz4uzBMeD527BWG:8/CFE7I4fBMeVQBWG
- TLSH T147868C13F2A501ECD05ED974CF3A56329A317C4A4BB092EF269836E11A75ED47B3CB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1