General
- Target 2026-08-04_ade6cea39fd35985d1cc2d86399af4a8_cobalt-strike_glassworm_icedid_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 471KB
- Sample260804-gk27dascrc
- SHA256 f2800b2a46bfc9a32e71cda05b670f250a7af2b8d65d11b423ed5558cd382b31
- MD5 ade6cea39fd35985d1cc2d86399af4a8
- SHA1 4400f45311093bffa1ea901f00f245d7e9455e0f
- SHA512 281e040af9e2bb39abe5e38ac4d2cef3180bb4945fa62aa7d1ed39dfd7b9988d445c02c73b4dfa50f8a987ed16dc2f3ce86bee009441dc92b5c42f44ff579a84
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msuY7sYqgB+Ap:693geIgB5
- TLSH T1C7A49E06F79008F9D4A7C57489A245529E3A7C9A0B71EEEF17C8432A1F337E08E39B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_ade6cea39fd35985d1cc2d86399af4a8_cobalt-strike_glassworm_icedid_remcos_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_ade6cea39fd35985d1cc2d86399af4a8_cobalt-strike_glassworm_icedid_remcos_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_ade6cea39fd35985d1cc2d86399af4a8_cobalt-strike_glassworm_icedid_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 471KB
- SHA256 f2800b2a46bfc9a32e71cda05b670f250a7af2b8d65d11b423ed5558cd382b31
- MD5 ade6cea39fd35985d1cc2d86399af4a8
- SHA1 4400f45311093bffa1ea901f00f245d7e9455e0f
- SHA512 281e040af9e2bb39abe5e38ac4d2cef3180bb4945fa62aa7d1ed39dfd7b9988d445c02c73b4dfa50f8a987ed16dc2f3ce86bee009441dc92b5c42f44ff579a84
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msuY7sYqgB+Ap:693geIgB5
- TLSH T1C7A49E06F79008F9D4A7C57489A245529E3A7C9A0B71EEEF17C8432A1F337E08E39B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association