General
- Target 2026-08-04_9ee3d213f02152efc2de19e8ac36c00c_cobalt-strike_glassworm_hawkeye_icedid_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 829KB
- Sample260804-gtlwraeb22
- SHA256 45d742ef55c5b64c394423b47b21c3e17c07a0b35d69912e2055e0f8c009198b
- MD5 9ee3d213f02152efc2de19e8ac36c00c
- SHA1 84ad4bd2ce0bd9a9ec7f4fb73811ecf1e96d97ef
- SHA512 b84dac8bfc14c698ef468149a22c02807849d9dc3389df43389c2d3abede15394aee35e616f9f26a8de566b8f8887d0f410fc6d54474e8789ffc0d8eb399796c
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msuY7seoyIJsMPrP5p6bYboEdNB:693geRgVPrP5s+oE1
- TLSH T1EC055B02B7E85079F6F35B309EB541519A7ABCA29E31D68F23C4061D0E71AD0DE39B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_9ee3d213f02152efc2de19e8ac36c00c_cobalt-strike_glassworm_hawkeye_icedid_remcos_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_9ee3d213f02152efc2de19e8ac36c00c_cobalt-strike_glassworm_hawkeye_icedid_remcos_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_9ee3d213f02152efc2de19e8ac36c00c_cobalt-strike_glassworm_hawkeye_icedid_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 829KB
- SHA256 45d742ef55c5b64c394423b47b21c3e17c07a0b35d69912e2055e0f8c009198b
- MD5 9ee3d213f02152efc2de19e8ac36c00c
- SHA1 84ad4bd2ce0bd9a9ec7f4fb73811ecf1e96d97ef
- SHA512 b84dac8bfc14c698ef468149a22c02807849d9dc3389df43389c2d3abede15394aee35e616f9f26a8de566b8f8887d0f410fc6d54474e8789ffc0d8eb399796c
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msuY7seoyIJsMPrP5p6bYboEdNB:693geRgVPrP5s+oE1
- TLSH T1EC055B02B7E85079F6F35B309EB541519A7ABCA29E31D68F23C4061D0E71AD0DE39B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association