General
- Target 2026-08-06_be3747a42c7020071cf7053e96c92efb_amadey_cobalt-strike_glassworm_icedid_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 476KB
- Sample260807-alqfmsdk3t
- SHA256 be6f4be4d43931e7e5b8cecb6204d4218d46178c4951c141bfa04fd1b600110a
- MD5 be3747a42c7020071cf7053e96c92efb
- SHA1 b1636876aefa3ef4958e75bb53530374b8d925eb
- SHA512 f89caf59223048fa379db50f0844ceecc48621755d0e2a7b5886944ceff7313ad8fe13e3d3167695c19a8d10013c30b44ec39cafa00da8f6e675a85e3f6cecb4
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msuY7snW+B+McMeR:693geeW+BxclR
- TLSH T1DCA49F06F79008F9D4A7C53489A24556DE3A7C9A0B71EEEF17C842291F337E08E39B65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-06_be3747a42c7020071cf7053e96c92efb_amadey_cobalt-strike_glassworm_icedid_remcos_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_be3747a42c7020071cf7053e96c92efb_amadey_cobalt-strike_glassworm_icedid_remcos_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_be3747a42c7020071cf7053e96c92efb_amadey_cobalt-strike_glassworm_icedid_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 476KB
- SHA256 be6f4be4d43931e7e5b8cecb6204d4218d46178c4951c141bfa04fd1b600110a
- MD5 be3747a42c7020071cf7053e96c92efb
- SHA1 b1636876aefa3ef4958e75bb53530374b8d925eb
- SHA512 f89caf59223048fa379db50f0844ceecc48621755d0e2a7b5886944ceff7313ad8fe13e3d3167695c19a8d10013c30b44ec39cafa00da8f6e675a85e3f6cecb4
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msuY7snW+B+McMeR:693geeW+BxclR
- TLSH T1DCA49F06F79008F9D4A7C53489A24556DE3A7C9A0B71EEEF17C842291F337E08E39B65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association