General
- Target 2026-07-28_d96aab2d4a76eef4ddaa837e29221b55_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- Sample260728-lqhr5stdnf
- SHA256 3b74f3a8d17a7afa673ab350769f71f47d4f0b2ba2401be3db02f35c23ff9c3a
- MD5 d96aab2d4a76eef4ddaa837e29221b55
- SHA1 c3d98b73c75c7ed84a46de8043fc9960a13e252d
- SHA512 6e70946b7ee6cd6a152b470ca4143291fa53cf9260dd8f16d20bf92b22283557e8a481693eefa59a1bd6a52b82023ee0af022dd9b1276491f36e4df656e8a8dd
- SSDEEP 98304:1rzXpkF0J99JITGW45jxvdz4uzBGuB2Yyjl:1/CFE7I4fBGuZ
- TLSH T13C868C13F2A501FCD05ED974CF3956329A317C4A4BB0A2EF269836E11A75ED47B38B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_d96aab2d4a76eef4ddaa837e29221b55_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_d96aab2d4a76eef4ddaa837e29221b55_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- SHA256 3b74f3a8d17a7afa673ab350769f71f47d4f0b2ba2401be3db02f35c23ff9c3a
- MD5 d96aab2d4a76eef4ddaa837e29221b55
- SHA1 c3d98b73c75c7ed84a46de8043fc9960a13e252d
- SHA512 6e70946b7ee6cd6a152b470ca4143291fa53cf9260dd8f16d20bf92b22283557e8a481693eefa59a1bd6a52b82023ee0af022dd9b1276491f36e4df656e8a8dd
- SSDEEP 98304:1rzXpkF0J99JITGW45jxvdz4uzBGuB2Yyjl:1/CFE7I4fBGuZ
- TLSH T13C868C13F2A501FCD05ED974CF3956329A317C4A4BB0A2EF269836E11A75ED47B38B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1