General
- Target 2026-08-03_5c143cd1a928543d0becff51a6eeaf7b_cobalt-strike_glassworm_megazord_poet-rat_satacom_vidar
- Size 78.0MB
- Sample260804-nyqh3avybx
- SHA256 360a2cbddec76fcf8ec5abcffd02ef3ac3cded3fd7f5c38a5996571f4f7a4840
- MD5 5c143cd1a928543d0becff51a6eeaf7b
- SHA1 e1f35e1a4f69dbf00380cc535a4fee41a1c9af71
- SHA512 6c02e463ab08c9aefb45702d095af9b96a69c06dfc7926be6db897114fba0515a60ba0ba494ab38994e876c7d60ba268e0af5ebf34262ededf71dbeaa1612ab1
- SSDEEP 786432:HrYq3N+l6gqUwqj5PhzbLuKHFRn51h+kuZ1qECV+g:cq3ol6gB5Skug
- TLSH T16C08AF05F3D84665C12EF6B98B95C61EC3B4B485136181CF055AEACE9FEFBC12A36132
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-03_5c143cd1a928543d0becff51a6eeaf7b_cobalt-strike_glassworm_megazord_poet-rat_satacom_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_5c143cd1a928543d0becff51a6eeaf7b_cobalt-strike_glassworm_megazord_poet-rat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_5c143cd1a928543d0becff51a6eeaf7b_cobalt-strike_glassworm_megazord_poet-rat_satacom_vidar
- Size 78.0MB
- SHA256 360a2cbddec76fcf8ec5abcffd02ef3ac3cded3fd7f5c38a5996571f4f7a4840
- MD5 5c143cd1a928543d0becff51a6eeaf7b
- SHA1 e1f35e1a4f69dbf00380cc535a4fee41a1c9af71
- SHA512 6c02e463ab08c9aefb45702d095af9b96a69c06dfc7926be6db897114fba0515a60ba0ba494ab38994e876c7d60ba268e0af5ebf34262ededf71dbeaa1612ab1
- SSDEEP 786432:HrYq3N+l6gqUwqj5PhzbLuKHFRn51h+kuZ1qECV+g:cq3ol6gB5Skug
- TLSH T16C08AF05F3D84665C12EF6B98B95C61EC3B4B485136181CF055AEACE9FEFBC12A36132
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.