General
- Target 2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm
- Size 1.1MB
- Sample260804-ftshvs1hph
- SHA256 e972730be6842b581b245cc91d5461f11f9f7aaeef7757fa4b1d85d4ede83e73
- MD5 e023171329c49dd9aceeda38f20def8f
- SHA1 6e78e9e8c5dd286efad41d63eff552ef807fb7cb
- SHA512 c6e06a167261b07dcb5b106be2a24fc72c4e8a7c9d1e6177449fe38cd36efb377cf9980b50aa81be3160735dfd6de3dcc99ba9d3db91298c7c9adae928bc4b3c
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msuY7s2YCDi50NiQDuysMFZzN/E/msuY7s3a0wIk0C:693geg93gewafDd70iTWCv
- TLSH T11645AE11F78044B9F4A785758AAB87159A39BC9A1F71DACF53C8032A1F727F08E38716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm
- Size 1.1MB
- SHA256 e972730be6842b581b245cc91d5461f11f9f7aaeef7757fa4b1d85d4ede83e73
- MD5 e023171329c49dd9aceeda38f20def8f
- SHA1 6e78e9e8c5dd286efad41d63eff552ef807fb7cb
- SHA512 c6e06a167261b07dcb5b106be2a24fc72c4e8a7c9d1e6177449fe38cd36efb377cf9980b50aa81be3160735dfd6de3dcc99ba9d3db91298c7c9adae928bc4b3c
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msuY7s2YCDi50NiQDuysMFZzN/E/msuY7s3a0wIk0C:693geg93gewafDd70iTWCv
- TLSH T11645AE11F78044B9F4A785758AAB87159A39BC9A1F71DACF53C8032A1F727F08E38716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association