General
- Target 2026-07-29_a1f60dd53781c0f12c21e2a56f4d4bbf_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.6MB
- Sample260729-le7bcszhqb
- SHA256 ee8220d19e98c2e174a178b1322f35ab6fb529dff5f2288dd5b7f12c7763177f
- MD5 a1f60dd53781c0f12c21e2a56f4d4bbf
- SHA1 6cdbe97469e0b7ed8d6f8d93544e63bb311867e0
- SHA512 9377cb052c19eec942ee51682ad09d905b2f8b66d9804b4fc75251f6823b2e0338eb3fdd755b42b67c27719046d13eef88f71b1166a97e38120c6b56a1b6e44d
- SSDEEP 98304:XSpbOrf4DgU6vBELOnTWPBx6wRfQKiKkKURgyLjR+gEiWyssUhVY+k:CZOr1WoWnRFQRpEqsFhG+k
- TLSH T130A67C13F29501D9E16ED1788B6A5232AA72BC8A4B30B2DF3A4C76151F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_a1f60dd53781c0f12c21e2a56f4d4bbf_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_a1f60dd53781c0f12c21e2a56f4d4bbf_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.6MB
- SHA256 ee8220d19e98c2e174a178b1322f35ab6fb529dff5f2288dd5b7f12c7763177f
- MD5 a1f60dd53781c0f12c21e2a56f4d4bbf
- SHA1 6cdbe97469e0b7ed8d6f8d93544e63bb311867e0
- SHA512 9377cb052c19eec942ee51682ad09d905b2f8b66d9804b4fc75251f6823b2e0338eb3fdd755b42b67c27719046d13eef88f71b1166a97e38120c6b56a1b6e44d
- SSDEEP 98304:XSpbOrf4DgU6vBELOnTWPBx6wRfQKiKkKURgyLjR+gEiWyssUhVY+k:CZOr1WoWnRFQRpEqsFhG+k
- TLSH T130A67C13F29501D9E16ED1788B6A5232AA72BC8A4B30B2DF3A4C76151F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory