General
- Target 2026-07-27_04a801b49cdc962543279936133343d2_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- Sample260727-db9y3sgk91
- SHA256 eef6fc152f059a2afc6a5c495b01f001a63ad0784ca53035be855b77dbb6d7ae
- MD5 04a801b49cdc962543279936133343d2
- SHA1 058252413f2852e76e370cca6ae49f6b531206ec
- SHA512 79751d86057608575b6e62bfc4046841b3a81c67ad3d40ab65269b260b8f4d9306a32c785e352a80eb1174496facd773d052f85c64e0912d6b999cd5a2104b0c
- SSDEEP 98304:1rzXpkF0J99JIYGW45jxvdz4uzBhPuFJ8yHe:1/CFE7IrfBh20y
- TLSH T1EB868C13F2A501ECD05ED974CF3A56329A317C4A4BB092EF269836E11A75ED47B3CB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_04a801b49cdc962543279936133343d2_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_04a801b49cdc962543279936133343d2_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- SHA256 eef6fc152f059a2afc6a5c495b01f001a63ad0784ca53035be855b77dbb6d7ae
- MD5 04a801b49cdc962543279936133343d2
- SHA1 058252413f2852e76e370cca6ae49f6b531206ec
- SHA512 79751d86057608575b6e62bfc4046841b3a81c67ad3d40ab65269b260b8f4d9306a32c785e352a80eb1174496facd773d052f85c64e0912d6b999cd5a2104b0c
- SSDEEP 98304:1rzXpkF0J99JIYGW45jxvdz4uzBhPuFJ8yHe:1/CFE7IrfBh20y
- TLSH T1EB868C13F2A501ECD05ED974CF3A56329A317C4A4BB092EF269836E11A75ED47B3CB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1