General

  • Target
    2026-08-07_98ef5404963d52198351dd80ce193cb4_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
  • Size 9.6MB
  • Sample260807-k3wdbst1ht
  • SHA256 0d6e0470c80e013c3be6a476e52d188283a778f85e81e9669c90aa889b20a2cf
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-07_98ef5404963d52198351dd80ce193cb4_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
    • Size 9.6MB
    • SHA256 0d6e0470c80e013c3be6a476e52d188283a778f85e81e9669c90aa889b20a2cf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks whether UAC is enabled

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks