Overview

overview

7

Static

static

3

2026-08-03...om.exe

windows10-2004-x64

7

2026-08-03...om.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    151s
  • max time network
    158s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    03/08/2026, 09:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-03_5bace9ba8daa15b10a0c0b7a28d5eb8a_cobalt-strike_dosia_glassworm_icedid_njrat_quasar-rat_satacom.exe
  • Size 54.5MB
  • Sample260803-k7wjwsshja
  • SHA256 0a9a9b6b4a86da185be72b50358320636f596b07f5feea5862317b127addc780
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 20 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-03_5bace9ba8daa15b10a0c0b7a28d5eb8a_cobalt-strike_dosia_glassworm_icedid_njrat_quasar-rat_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-03_5bace9ba8daa15b10a0c0b7a28d5eb8a_cobalt-strike_dosia_glassworm_icedid_njrat_quasar-rat_satacom.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4156
    • C:\Users\Admin\AppData\Local\Temp\2026-08-03_5bace9ba8daa15b10a0c0b7a28d5eb8a_cobalt-strike_dosia_glassworm_icedid_njrat_quasar-rat_satacom.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-03_5bace9ba8daa15b10a0c0b7a28d5eb8a_cobalt-strike_dosia_glassworm_icedid_njrat_quasar-rat_satacom.exe"
      2⤵
      • Loads dropped DLL
      PID:1368

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        _imaging.cp314-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41562\PIL\_imaging.cp314-win_amd64.pyd
        • Size 2.5MB
        • SHA256 b4e06283c347910b5973bd5732159ea9eb26eda48e3eed183be2e3382db26597
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _imagingmath.cp314-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41562\PIL\_imagingmath.cp314-win_amd64.pyd
        • Size 25KB
        • SHA256 a1c024d3e0e75802e3249a1a33335809b6cf032749ed2c4507d622d6610e36f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41562\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41562\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41562\_bz2.pyd
        • Size 86KB
        • SHA256 4a61ac9bf837c47f218e2c61c9ce86db151737bf11ff9501238c9abe06e0b052
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41562\_ctypes.pyd
        • Size 139KB
        • SHA256 af5ed17e345f76366af65eff145753d3b0a3f48693c015b1eb539c0d2e3d545b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41562\_hashlib.pyd
        • Size 67KB
        • SHA256 45837e6ba66b3d35b43530a6af3deece3da2fe3ffb55f049f9da4bb3a1bde5ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41562\_lzma.pyd
        • Size 157KB
        • SHA256 73b30810cd37d7938360e613b41e9fe120c46f847adcb85b9f98bbfe2f2a4145
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41562\_socket.pyd
        • Size 85KB
        • SHA256 83abf14d36467f21b991fd7686fa672954d9c52040d311dd267e1154dcb1e042
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41562\_ssl.pyd
        • Size 180KB
        • SHA256 010b70aa182143dca9cccd1d9476552c35f5d96ce0d9a2a0906b75b0d3df0a9b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41562\_wmi.pyd
        • Size 39KB
        • SHA256 bba57c6a21dfb3724f4375a0da3e4876a2060c3e6e37129c6ee56f3589825b07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _zstd.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41562\_zstd.pyd
        • Size 491KB
        • SHA256 fb639f152d25e2b3864b2007e242d7e93043c46e21662895d6ebe88d2ae45239
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41562\base_library.zip
        • Size 1.3MB
        • SHA256 1dfc411e9f920359e8a6e06f7d146405e03c1fc57c8a6dad9037d4bf02cc0cdd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41562\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 8b27ebae75cc99f20075322446af36c9ffcb4e3b400a77d712ef43f007f47f7d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41562\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41562\libssl-3.dll
        • Size 776KB
        • SHA256 56dd50fb903b860ace831d0cd6c6250cd57e8655867c3a0fa16eac2d4cc0ba0b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.DLL
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41562\python3.DLL
        • Size 72KB
        • SHA256 697526f0e6a7346059e48ace51d91c2cb184631f473e3ba781c3406692153112
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python314.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41562\python314.dll
        • Size 6.5MB
        • SHA256 b1e3f08b8714374c0c3956dabb869f3be64b905f7d8180bcd0918550b5449eef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41562\ucrtbase.dll
        • Size 1.1MB
        • SHA256 c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41562\unicodedata.pyd
        • Size 740KB
        • SHA256 15cadf8d75936910a931be5fa8054edf0de16e2fab614539dd80a8281936346a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1368-156-0x0000020153CD0000-0x0000020153CD1000-memory.dmp
        Download

        memory/1368-119-0x00007FF7A0FC0000-0x00007FF7A101D000-memory.dmp
        Download

        memory/1368-162-0x00007FF7A0FC0000-0x00007FF7A101D000-memory.dmp
        Download

        memory/4156-0-0x00007FF7A0FC0000-0x00007FF7A101D000-memory.dmp
        Download

        memory/4156-161-0x00007FF7A0FC0000-0x00007FF7A101D000-memory.dmp
        Download