General
- Target 2026-08-05_29a847516c519a697c630299936c537a_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.4MB
- Sample260805-1et4csxaph
- SHA256 6e0ada91f56793523a57f659ebcc1fbe9d35f9d37a8eb510c016506fd6956423
- MD5 29a847516c519a697c630299936c537a
- SHA1 2ff74415a668611b093b9e3cfd3df92b6252c5fb
- SHA512 aa5cbcffb37817f5caa5c31107657b484d2cd7e5c918ef0281790fa4b30979ca82f013baf5e7888c637030f279edc14159d3812e91a5b7cfa32d08cc9be7b03c
- SSDEEP 49152:XoBG8Hl1EGhrJgH6p+vHkUrxK69MkmX1uzQZ2i4M4DDShZ1gLTpU7NPbPeCEwDlI:V8tmK+vh9gF1v7ki7NPbPND527BWG
- TLSH T123269D13F5DA01E8C069D179874A9232FA61BC454B31B2DF0B9077622B7AEE49F3E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_29a847516c519a697c630299936c537a_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_29a847516c519a697c630299936c537a_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.4MB
- SHA256 6e0ada91f56793523a57f659ebcc1fbe9d35f9d37a8eb510c016506fd6956423
- MD5 29a847516c519a697c630299936c537a
- SHA1 2ff74415a668611b093b9e3cfd3df92b6252c5fb
- SHA512 aa5cbcffb37817f5caa5c31107657b484d2cd7e5c918ef0281790fa4b30979ca82f013baf5e7888c637030f279edc14159d3812e91a5b7cfa32d08cc9be7b03c
- SSDEEP 49152:XoBG8Hl1EGhrJgH6p+vHkUrxK69MkmX1uzQZ2i4M4DDShZ1gLTpU7NPbPeCEwDlI:V8tmK+vh9gF1v7ki7NPbPND527BWG
- TLSH T123269D13F5DA01E8C069D179874A9232FA61BC454B31B2DF0B9077622B7AEE49F3E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory