General
- Target 2026-08-06_39e418589fcffd115bccace4c13f732e_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 377KB
- Sample260807-a9faksdc59
- SHA256 afe305fdc32098c51d0099ac56e8a9203ea42d42701f94caa07a1147f59235bd
- MD5 39e418589fcffd115bccace4c13f732e
- SHA1 98201481b56401491d1c956fb6ed03d096f948c7
- SHA512 9d205d65f0799405aa6e4fa44bd54174038e19b4c5f58b143d3addae6aab8efbe797b0294cce8dbd2936aad7b55886f037934cb67006574fb9b4cab9085191c3
- SSDEEP 6144:p+GYnA0zeW8Di50JziQ8kd3f+RysMFZzN/E/msHOtbSHqNsarwk:pYCDi50NiQDuysMFZzN/E/msuY7sR
- TLSH T1B2848C16F75408F9D59BC57489924546DA39BC8F0B72EAEF17C8422A2F337E08E39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-06_39e418589fcffd115bccace4c13f732e_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_39e418589fcffd115bccace4c13f732e_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_39e418589fcffd115bccace4c13f732e_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 377KB
- SHA256 afe305fdc32098c51d0099ac56e8a9203ea42d42701f94caa07a1147f59235bd
- MD5 39e418589fcffd115bccace4c13f732e
- SHA1 98201481b56401491d1c956fb6ed03d096f948c7
- SHA512 9d205d65f0799405aa6e4fa44bd54174038e19b4c5f58b143d3addae6aab8efbe797b0294cce8dbd2936aad7b55886f037934cb67006574fb9b4cab9085191c3
- SSDEEP 6144:p+GYnA0zeW8Di50JziQ8kd3f+RysMFZzN/E/msHOtbSHqNsarwk:pYCDi50NiQDuysMFZzN/E/msuY7sR
- TLSH T1B2848C16F75408F9D59BC57489924546DA39BC8F0B72EAEF17C8422A2F337E08E39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association