General
- Target 2026-08-05_2a022542080cafdfba99ddb73ff35652_amadey_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 1.2MB
- Sample260805-rngpysbf35
- SHA256 bda44a4d8c4706e1ca2f25923c8fa7baa8a98b35f228a81c584aea7c8c279879
- MD5 2a022542080cafdfba99ddb73ff35652
- SHA1 ed003524a28faa1ec9bda2ba3434e28fec591798
- SHA512 a9374729a7b38bc6a1209267aa61260960efe8ee12006375fb7eb22725939b6d3eebe69a45b3263c660ff61952d310b21960547faea187dfe289bdf29b0c0892
- SSDEEP 24576:693ge8Ze0p4Ek4niOkl/A04szE87JKTvm:DXeW4SkZP4sz9Mb
- TLSH T17C451A15F6788777D0B3C0B9C5D7AA99FE3234465B308ACB0249932C2E277E58A35739
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-05_2a022542080cafdfba99ddb73ff35652_amadey_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_2a022542080cafdfba99ddb73ff35652_amadey_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_2a022542080cafdfba99ddb73ff35652_amadey_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 1.2MB
- SHA256 bda44a4d8c4706e1ca2f25923c8fa7baa8a98b35f228a81c584aea7c8c279879
- MD5 2a022542080cafdfba99ddb73ff35652
- SHA1 ed003524a28faa1ec9bda2ba3434e28fec591798
- SHA512 a9374729a7b38bc6a1209267aa61260960efe8ee12006375fb7eb22725939b6d3eebe69a45b3263c660ff61952d310b21960547faea187dfe289bdf29b0c0892
- SSDEEP 24576:693ge8Ze0p4Ek4niOkl/A04szE87JKTvm:DXeW4SkZP4sz9Mb
- TLSH T17C451A15F6788777D0B3C0B9C5D7AA99FE3234465B308ACB0249932C2E277E58A35739
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association