General
- Target 2026-08-03_748bbd9864e8f861bf9a1f9ede5f0b62_amadey_cobalt-strike_glassworm_icedid_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 529KB
- Sample260804-nftg1adm7w
- SHA256 076c45ac5cb2b7ef2b00ca38e3cc8e961fc87dde087184c68d45731ea0b1a46d
- MD5 748bbd9864e8f861bf9a1f9ede5f0b62
- SHA1 762047e29e2cb580fa290ede5b35c62ecc0533f1
- SHA512 88d91d58708a9f8841fbb4701e67d379bbf3ec9b4c858d5197f0260edb4117ce7f3e1b0534ee1176e3f4366b7346a7441f5e51d5a1530e424bf45e74e5bc663d
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msuY7sxCiB+FqI:693ge4CiB/I
- TLSH T179B46D12F7E404FDF4A78634897246569A75BC674B31EAEF07C402291F32AE08E35B76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-03_748bbd9864e8f861bf9a1f9ede5f0b62_amadey_cobalt-strike_glassworm_icedid_remcos_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_748bbd9864e8f861bf9a1f9ede5f0b62_amadey_cobalt-strike_glassworm_icedid_remcos_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_748bbd9864e8f861bf9a1f9ede5f0b62_amadey_cobalt-strike_glassworm_icedid_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 529KB
- SHA256 076c45ac5cb2b7ef2b00ca38e3cc8e961fc87dde087184c68d45731ea0b1a46d
- MD5 748bbd9864e8f861bf9a1f9ede5f0b62
- SHA1 762047e29e2cb580fa290ede5b35c62ecc0533f1
- SHA512 88d91d58708a9f8841fbb4701e67d379bbf3ec9b4c858d5197f0260edb4117ce7f3e1b0534ee1176e3f4366b7346a7441f5e51d5a1530e424bf45e74e5bc663d
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msuY7sxCiB+FqI:693ge4CiB/I
- TLSH T179B46D12F7E404FDF4A78634897246569A75BC674B31EAEF07C402291F32AE08E35B76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association