General
- Target 2026-08-01_c5419560fefa4d1504605bd65a202a80_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.6MB
- Sample260801-mlc7jasfrc
- SHA256 838c6bf0622f91416826108d310259b54bd88b70dfe1bae1bb34d6b4ded6d660
- MD5 c5419560fefa4d1504605bd65a202a80
- SHA1 f96c5179c36d0165b5a9e2af688c9ebe4af6dd68
- SHA512 19c87547f607cde3e5e65e5e50e2d2c7b4976e5d01b8b764181d4dade0768bbc6b62dc631399ae7df8259bd8455c8cc081d8b1f22bd86ae93be657c9d81b4777
- SSDEEP 98304:CSpbOrf4DgU6vBELOnTWPBx6wRfQKiKkKURgyLjR+gEiWyssUhVjqGsQr:pZOr1WoWnRFQRpEqsFhTj
- TLSH T144A67C13F29501D9E16ED1788B6A5232AA72BC8A4B30B2DF3A4C76151F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_c5419560fefa4d1504605bd65a202a80_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_c5419560fefa4d1504605bd65a202a80_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.6MB
- SHA256 838c6bf0622f91416826108d310259b54bd88b70dfe1bae1bb34d6b4ded6d660
- MD5 c5419560fefa4d1504605bd65a202a80
- SHA1 f96c5179c36d0165b5a9e2af688c9ebe4af6dd68
- SHA512 19c87547f607cde3e5e65e5e50e2d2c7b4976e5d01b8b764181d4dade0768bbc6b62dc631399ae7df8259bd8455c8cc081d8b1f22bd86ae93be657c9d81b4777
- SSDEEP 98304:CSpbOrf4DgU6vBELOnTWPBx6wRfQKiKkKURgyLjR+gEiWyssUhVjqGsQr:pZOr1WoWnRFQRpEqsFhTj
- TLSH T144A67C13F29501D9E16ED1788B6A5232AA72BC8A4B30B2DF3A4C76151F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory