General
- Target 2026-08-05_8e26f4efa3a0c9cc1fec60edb5634b4b_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- Sample260805-qcaa3aswfx
- SHA256 99f861b2144f1c40faa3a35dee2fc4a63106c86189ec5d6e6f03d2a5ed99015d
- MD5 8e26f4efa3a0c9cc1fec60edb5634b4b
- SHA1 ecaaa16b79c3177a531d443611a7b247c16c7190
- SHA512 ce23ef0a0137889315a93e7bca52353e33fe5ed5593816d1a21f7c70db8d148e8802c57beff537453bad8bb275be84aa6baf01d2d82d625ea4e3550e51d2e3d1
- SSDEEP 98304:qrzXpkF0J99JIeGW45jxvdz4uzBGF8/h:q/CFE7IBfBGF8/
- TLSH T1C3868C13F2A501ECD05ED974CF3A56329B317C4A4BB092EF269836E11A75ED47B38B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_8e26f4efa3a0c9cc1fec60edb5634b4b_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_8e26f4efa3a0c9cc1fec60edb5634b4b_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- SHA256 99f861b2144f1c40faa3a35dee2fc4a63106c86189ec5d6e6f03d2a5ed99015d
- MD5 8e26f4efa3a0c9cc1fec60edb5634b4b
- SHA1 ecaaa16b79c3177a531d443611a7b247c16c7190
- SHA512 ce23ef0a0137889315a93e7bca52353e33fe5ed5593816d1a21f7c70db8d148e8802c57beff537453bad8bb275be84aa6baf01d2d82d625ea4e3550e51d2e3d1
- SSDEEP 98304:qrzXpkF0J99JIeGW45jxvdz4uzBGF8/h:q/CFE7IBfBGF8/
- TLSH T1C3868C13F2A501ECD05ED974CF3A56329B317C4A4BB092EF269836E11A75ED47B38B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1