General
- Target 2026-08-04_a4c39fa5a2792e9190f5c15f131fd3e4_cobalt-strike_glassworm_icedid_redline-stealer_rhadamanthys_ryuk_satacom_stealc_vidar_xworm
- Size 579KB
- Sample260804-gqyfdaxtgv
- SHA256 cfda5b6a17a38b84013b05db9c0030d268cfb62f835f74b040829e7536659157
- MD5 a4c39fa5a2792e9190f5c15f131fd3e4
- SHA1 bbdd72593efe802e2dac81a5e3c9be9b61f00ee3
- SHA512 16248f1cff16d2903bcadd9778ff7e19bc377a112a45a873f3e1e909433a323e8b27334704759ac0c5973ab46f61861554bd4cce4487e634baa6c1733df6dcde
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msuY7sgo9+n:693gek+n
- TLSH T15BC44C06FB4044B9D49689704652965E9B257C4ACB239EDF22C45EDEFFF2AE04E38730
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_a4c39fa5a2792e9190f5c15f131fd3e4_cobalt-strike_glassworm_icedid_redline-stealer_rhadamant.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_a4c39fa5a2792e9190f5c15f131fd3e4_cobalt-strike_glassworm_icedid_redline-stealer_rhadamant.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_a4c39fa5a2792e9190f5c15f131fd3e4_cobalt-strike_glassworm_icedid_redline-stealer_rhadamanthys_ryuk_satacom_stealc_vidar_xworm
- Size 579KB
- SHA256 cfda5b6a17a38b84013b05db9c0030d268cfb62f835f74b040829e7536659157
- MD5 a4c39fa5a2792e9190f5c15f131fd3e4
- SHA1 bbdd72593efe802e2dac81a5e3c9be9b61f00ee3
- SHA512 16248f1cff16d2903bcadd9778ff7e19bc377a112a45a873f3e1e909433a323e8b27334704759ac0c5973ab46f61861554bd4cce4487e634baa6c1733df6dcde
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msuY7sgo9+n:693gek+n
- TLSH T15BC44C06FB4044B9D49689704652965E9B257C4ACB239EDF22C45EDEFFF2AE04E38730
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association