General
- Target 2026-08-04_80e5702b92f110f3d0f169f7647010f0_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 16.6MB
- Sample260804-slmc4ahk3s
- SHA256 1a44786de6b6ad2f5ece83b63e54f7a6f3a70d7caa762a3e52c52ddd77f36520
- MD5 80e5702b92f110f3d0f169f7647010f0
- SHA1 dccf90f58e228e58c7bc90b032b3fc8ced79e270
- SHA512 df4ab5dc4301c30e60c5a8bf6f8fd894d1a9b8082289060073d850e73b2339548a79adf6ffeefad0de59c0695f73b7106a570e26727c62c5f70450a16c9ddf97
- SSDEEP 98304:tGvIuNGOwEpkGJrBVIa1plCx/e0u3xJiDDVsvZS5WIiLVwa9ucZ9utrmbNNqBiDw:tUYEpfrsF/DESL4bL
- TLSH T1F3076B53F2A680ECC04DC478875AD232AA647C590770A2DF17E43F573E76AD86E3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_80e5702b92f110f3d0f169f7647010f0_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_80e5702b92f110f3d0f169f7647010f0_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 16.6MB
- SHA256 1a44786de6b6ad2f5ece83b63e54f7a6f3a70d7caa762a3e52c52ddd77f36520
- MD5 80e5702b92f110f3d0f169f7647010f0
- SHA1 dccf90f58e228e58c7bc90b032b3fc8ced79e270
- SHA512 df4ab5dc4301c30e60c5a8bf6f8fd894d1a9b8082289060073d850e73b2339548a79adf6ffeefad0de59c0695f73b7106a570e26727c62c5f70450a16c9ddf97
- SSDEEP 98304:tGvIuNGOwEpkGJrBVIa1plCx/e0u3xJiDDVsvZS5WIiLVwa9ucZ9utrmbNNqBiDw:tUYEpfrsF/DESL4bL
- TLSH T1F3076B53F2A680ECC04DC478875AD232AA647C590770A2DF17E43F573E76AD86E3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1