General
- Target 2026-07-31_ebc4bf6f62f8f6b2c5918657b8b5e829_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 8.9MB
- Sample260731-kpb3jayzgz
- SHA256 624b0aad859229910851caef3bc67d91ba1a8cee6cdf6b23ba68b1a52061a7dd
- MD5 ebc4bf6f62f8f6b2c5918657b8b5e829
- SHA1 4b1dc33f0f41bb038310131c7a574319659b5a90
- SHA512 76807ebf8e79bec439716d38ea809ed932c4b6e48df4088d51e5554a5e32f117ea727c5ccdf8d69b586720f8cd40d487cfe39e0e0fe9a39b8857fe8adbfe6d92
- SSDEEP 98304:sAW3TxgcOcB5PezCSxHUo3/aW6GoOMDdxaJ97DwsCkD527BWG:sAItcddCIHiY7D8kVQBWG
- TLSH T131967D23F2E601E9F06ED178876A9232A972BC854B30B2DF075076651E76FE05B3D724
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_ebc4bf6f62f8f6b2c5918657b8b5e829_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_ebc4bf6f62f8f6b2c5918657b8b5e829_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 8.9MB
- SHA256 624b0aad859229910851caef3bc67d91ba1a8cee6cdf6b23ba68b1a52061a7dd
- MD5 ebc4bf6f62f8f6b2c5918657b8b5e829
- SHA1 4b1dc33f0f41bb038310131c7a574319659b5a90
- SHA512 76807ebf8e79bec439716d38ea809ed932c4b6e48df4088d51e5554a5e32f117ea727c5ccdf8d69b586720f8cd40d487cfe39e0e0fe9a39b8857fe8adbfe6d92
- SSDEEP 98304:sAW3TxgcOcB5PezCSxHUo3/aW6GoOMDdxaJ97DwsCkD527BWG:sAItcddCIHiY7D8kVQBWG
- TLSH T131967D23F2E601E9F06ED178876A9232A972BC854B30B2DF075076651E76FE05B3D724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory