General
- Target 2026-08-04_89599f53becae8ebd648118e5424b4ed_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 754KB
- Sample260804-g6wayshl2s
- SHA256 033ed8f2b01b04cfe42f60852f2c72a0a652c01929051453d1e1cb1a27c6542e
- MD5 89599f53becae8ebd648118e5424b4ed
- SHA1 a9f0d306e17701a40ec7066f6c32311f0184d2d4
- SHA512 02a7cb97878b20b7fd137af006fe3fd3a2bd5fce0d3b32332ff6f715a0ecce2f0bf944c864ff2640c7be688e523899b145fd771c1d858228df70f4f72f5dad44
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msup7sYYCDi50NiQDuysMFZzN/E/msup7sG:693gTC93gTr
- TLSH T1F1F48C06F75408F9D59BC57489924546DA39BC8F1B72EAEF17C8422A2F237F08E39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_89599f53becae8ebd648118e5424b4ed_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_89599f53becae8ebd648118e5424b4ed_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_89599f53becae8ebd648118e5424b4ed_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 754KB
- SHA256 033ed8f2b01b04cfe42f60852f2c72a0a652c01929051453d1e1cb1a27c6542e
- MD5 89599f53becae8ebd648118e5424b4ed
- SHA1 a9f0d306e17701a40ec7066f6c32311f0184d2d4
- SHA512 02a7cb97878b20b7fd137af006fe3fd3a2bd5fce0d3b32332ff6f715a0ecce2f0bf944c864ff2640c7be688e523899b145fd771c1d858228df70f4f72f5dad44
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msup7sYYCDi50NiQDuysMFZzN/E/msup7sG:693gTC93gTr
- TLSH T1F1F48C06F75408F9D59BC57489924546DA39BC8F1B72EAEF17C8422A2F237F08E39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association