General
- Target 2026-08-03_d916c8e0c421b5d3dadf616e8fc37808_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 376KB
- Sample260804-legqpswgph
- SHA256 c82eea715a6707cfb15da3e0d04341f53ac7eb20de6b198d79489ef00fb306f5
- MD5 d916c8e0c421b5d3dadf616e8fc37808
- SHA1 291981eba03bde37b44133dfd7c07a9827301bb6
- SHA512 f4f47ba0a1d08ed2847f4e00f5261bb78a9534934246c7ef6bbd0fa8cac2fa468364236a9bd9eaa1857c2732d90be70d6310f14e1a3b6f225fe32978d21a98bd
- SSDEEP 6144:N+GYnA0zeW8Di50JziQ81d3f+RysMFZzN/E/msHOtbSiqNsarw+:dYCDi50NiQOuysMFZzN/E/msup7s/
- TLSH T15E848C06F75408F9D59BC57489924546DA39BC8F1B72EAEF17C8422A2F237F08E39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-03_d916c8e0c421b5d3dadf616e8fc37808_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_d916c8e0c421b5d3dadf616e8fc37808_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_d916c8e0c421b5d3dadf616e8fc37808_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 376KB
- SHA256 c82eea715a6707cfb15da3e0d04341f53ac7eb20de6b198d79489ef00fb306f5
- MD5 d916c8e0c421b5d3dadf616e8fc37808
- SHA1 291981eba03bde37b44133dfd7c07a9827301bb6
- SHA512 f4f47ba0a1d08ed2847f4e00f5261bb78a9534934246c7ef6bbd0fa8cac2fa468364236a9bd9eaa1857c2732d90be70d6310f14e1a3b6f225fe32978d21a98bd
- SSDEEP 6144:N+GYnA0zeW8Di50JziQ81d3f+RysMFZzN/E/msHOtbSiqNsarw+:dYCDi50NiQOuysMFZzN/E/msup7s/
- TLSH T15E848C06F75408F9D59BC57489924546DA39BC8F1B72EAEF17C8422A2F237F08E39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association