General
- Target 2026-08-04_770983a6a1fc7c178380431b8cf3b3ce_cobalt-strike_glassworm_icedid_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 964KB
- Sample260804-hh9zwahn71
- SHA256 023c755eb8eaced7561da433fbec230f7d3a186223dee88566e215307483a5e4
- MD5 770983a6a1fc7c178380431b8cf3b3ce
- SHA1 146c52b82549790955c60f56ff7fda18e81c311f
- SHA512 d56767a7d928427bb2e86d543d94f4edda9c45baf63e54a670c9afbfcbe7ba77590b23cfa0e9b7c570a43181ea2ec2312fd64873fead2beafdb65ae3232d45af
- SSDEEP 24576:693gewBdhDRYmKi9UiZYzZ9TSD9J7xH5zsD:DZpRYmn91MLT89tp5YD
- TLSH T1D425BF19FBA0C076D06381348D5AD349A675B8B64B2199CF7BCC532D2F326E18F39B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_770983a6a1fc7c178380431b8cf3b3ce_cobalt-strike_glassworm_icedid_remcos_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_770983a6a1fc7c178380431b8cf3b3ce_cobalt-strike_glassworm_icedid_remcos_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_770983a6a1fc7c178380431b8cf3b3ce_cobalt-strike_glassworm_icedid_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 964KB
- SHA256 023c755eb8eaced7561da433fbec230f7d3a186223dee88566e215307483a5e4
- MD5 770983a6a1fc7c178380431b8cf3b3ce
- SHA1 146c52b82549790955c60f56ff7fda18e81c311f
- SHA512 d56767a7d928427bb2e86d543d94f4edda9c45baf63e54a670c9afbfcbe7ba77590b23cfa0e9b7c570a43181ea2ec2312fd64873fead2beafdb65ae3232d45af
- SSDEEP 24576:693gewBdhDRYmKi9UiZYzZ9TSD9J7xH5zsD:DZpRYmn91MLT89tp5YD
- TLSH T1D425BF19FBA0C076D06381348D5AD349A675B8B64B2199CF7BCC532D2F326E18F39B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association