General
- Target 2026-08-01_3e17fa043e774a6d33bd9e814a860f23_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 22.9MB
- Sample260802-bahgbsar4y
- SHA256 96988a8dc46643d202c16e97f66480e27d2ce0b5064d44e227d3475ba8fe8e41
- MD5 3e17fa043e774a6d33bd9e814a860f23
- SHA1 033073c3d29dc3517e6d82b36555654016a2e7f5
- SHA512 550a993c913f6563933525010ac7b31a8e0a1719ee2c2eddaa7b34b65fa288788ee438f438f3fd52d079ac739cc9d44312027d7e21085a9e713e1ccbe311c386
- SSDEEP 393216:EGDT6q63n4ck/YviWbkOh5M6Om+3Qic/aNEeTDJ8qU+P5vjs7l:FDOb3nvpbLhq5LGhe/uqUs5
- TLSH T1833701C566D042FCC7928138C64707E6E7E138554B758AEB7F8185122E72EE2C9BBE34
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_3e17fa043e774a6d33bd9e814a860f23_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_3e17fa043e774a6d33bd9e814a860f23_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_3e17fa043e774a6d33bd9e814a860f23_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 22.9MB
- SHA256 96988a8dc46643d202c16e97f66480e27d2ce0b5064d44e227d3475ba8fe8e41
- MD5 3e17fa043e774a6d33bd9e814a860f23
- SHA1 033073c3d29dc3517e6d82b36555654016a2e7f5
- SHA512 550a993c913f6563933525010ac7b31a8e0a1719ee2c2eddaa7b34b65fa288788ee438f438f3fd52d079ac739cc9d44312027d7e21085a9e713e1ccbe311c386
- SSDEEP 393216:EGDT6q63n4ck/YviWbkOh5M6Om+3Qic/aNEeTDJ8qU+P5vjs7l:FDOb3nvpbLhq5LGhe/uqUs5
- TLSH T1833701C566D042FCC7928138C64707E6E7E138554B758AEB7F8185122E72EE2C9BBE34
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger