General

  • Target
    2026-07-28_fd62ba880ed871a994852cfbe29431a7_cobalt-strike_ghostweaver_glassworm_icedid_lockbit_satacom
  • Size 8.5MB
  • Sample260729-aa7wjs1wbs
  • SHA256 98c80a7872df6a57bb8c8fc5127dc67373572d4e689b9153f03d8f41fcd0acec
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-28_fd62ba880ed871a994852cfbe29431a7_cobalt-strike_ghostweaver_glassworm_icedid_lockbit_satacom
    • Size 8.5MB
    • SHA256 98c80a7872df6a57bb8c8fc5127dc67373572d4e689b9153f03d8f41fcd0acec
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Windows security bypass

    • Windows security modification

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks