General
- Target 2026-08-02_bac52159e48872ed4154e98cc7a76cc7_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 377KB
- Sample260802-c6k3rsseqd
- SHA256 5da099d1de7fd5d4ea6ac7b7eacf71a3638edcc319a2ed9a2a7ecd597c70d12e
- MD5 bac52159e48872ed4154e98cc7a76cc7
- SHA1 c8a793e7f8beaedcad2fc66433a23bf71e84609b
- SHA512 35a6052ad31caea275d91f46b13449994a19d8a7ed019504fbb48059e20306c2b859ba9869634796fdb454631ba552b74d9d3bb6660599f7268579b87ab69a7e
- SSDEEP 6144:p+GYnA0zeW8Di50JziQ8kd3f+RysMFZzN/E/msHOtbSiqNsarw:pYCDi50NiQDuysMFZzN/E/msup7s
- TLSH T1AA848C06F75408F9D59BC57489924546DA39BC8F1B72EAEF17C8422A2F237F08E39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-02_bac52159e48872ed4154e98cc7a76cc7_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_bac52159e48872ed4154e98cc7a76cc7_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_bac52159e48872ed4154e98cc7a76cc7_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 377KB
- SHA256 5da099d1de7fd5d4ea6ac7b7eacf71a3638edcc319a2ed9a2a7ecd597c70d12e
- MD5 bac52159e48872ed4154e98cc7a76cc7
- SHA1 c8a793e7f8beaedcad2fc66433a23bf71e84609b
- SHA512 35a6052ad31caea275d91f46b13449994a19d8a7ed019504fbb48059e20306c2b859ba9869634796fdb454631ba552b74d9d3bb6660599f7268579b87ab69a7e
- SSDEEP 6144:p+GYnA0zeW8Di50JziQ8kd3f+RysMFZzN/E/msHOtbSiqNsarw:pYCDi50NiQDuysMFZzN/E/msup7s
- TLSH T1AA848C06F75408F9D59BC57489924546DA39BC8F1B72EAEF17C8422A2F237F08E39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association