General
- Target 2026-08-04_2123154b9e1bd1d7b7d7191d0550a405_cobalt-strike_glassworm_icedid_rhadamanthys_ryuk_satacom_smoke-loader_stealc_tofsee_vidar_xworm
- Size 708KB
- Sample260804-jyj9tsfg53
- SHA256 37841d351102f40434be4b714bcf1b1242a5075dd9bd26fcd236c0a7cfe102fb
- MD5 2123154b9e1bd1d7b7d7191d0550a405
- SHA1 de9eb4031ba66173cc35c66fafee6d50579e7e09
- SHA512 09e8440687771f9cbb5577f8e8b729d76445c8f74d7acb31e120f86cf38e37fba81d86e0b1f738f20a6200806953e086221b9cba5ba829a5c189d2bebce7fb17
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msuY7se6JQKsUASsf0B+:693geReQmsfs+
- TLSH T198F45A16FB8080B5D4A2497089A5926D9735B859CB239E9F23845FDEFFF2AD04E34331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_2123154b9e1bd1d7b7d7191d0550a405_cobalt-strike_glassworm_icedid_rhadamanthys_ryuk_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_2123154b9e1bd1d7b7d7191d0550a405_cobalt-strike_glassworm_icedid_rhadamanthys_ryuk_satacom.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_2123154b9e1bd1d7b7d7191d0550a405_cobalt-strike_glassworm_icedid_rhadamanthys_ryuk_satacom_smoke-loader_stealc_tofsee_vidar_xworm
- Size 708KB
- SHA256 37841d351102f40434be4b714bcf1b1242a5075dd9bd26fcd236c0a7cfe102fb
- MD5 2123154b9e1bd1d7b7d7191d0550a405
- SHA1 de9eb4031ba66173cc35c66fafee6d50579e7e09
- SHA512 09e8440687771f9cbb5577f8e8b729d76445c8f74d7acb31e120f86cf38e37fba81d86e0b1f738f20a6200806953e086221b9cba5ba829a5c189d2bebce7fb17
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msuY7se6JQKsUASsf0B+:693geReQmsfs+
- TLSH T198F45A16FB8080B5D4A2497089A5926D9735B859CB239E9F23845FDEFFF2AD04E34331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association