General
- Target 2026-08-07_98ef5404963d52198351dd80ce193cb4_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.6MB
- Sample260807-k3wdbst1ht
- SHA256 0d6e0470c80e013c3be6a476e52d188283a778f85e81e9669c90aa889b20a2cf
- MD5 98ef5404963d52198351dd80ce193cb4
- SHA1 43ad11ef7ef0126c80f34a2ce329124b11a7cc0f
- SHA512 6e3834d57ad193ce52d247bda85e7e398f87e3ff8861efe07f4726957ae7df6380b3e216ec05c4d45b89cb5198f3c6ac26a987cadaca481935f62a64e3981e4f
- SSDEEP 98304:4SpbOrf4DgU6vBELOnTWPBx6wRfQKiKkKURgyLjR+gEiWyssUhV3qGsQr:bZOr1WoWnRFQRpEqsFhDj
- TLSH T18BA67C13F29501D9E16ED1788B6A5232AA72BC8A4B30B2DF3A4C76151F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_98ef5404963d52198351dd80ce193cb4_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_98ef5404963d52198351dd80ce193cb4_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.6MB
- SHA256 0d6e0470c80e013c3be6a476e52d188283a778f85e81e9669c90aa889b20a2cf
- MD5 98ef5404963d52198351dd80ce193cb4
- SHA1 43ad11ef7ef0126c80f34a2ce329124b11a7cc0f
- SHA512 6e3834d57ad193ce52d247bda85e7e398f87e3ff8861efe07f4726957ae7df6380b3e216ec05c4d45b89cb5198f3c6ac26a987cadaca481935f62a64e3981e4f
- SSDEEP 98304:4SpbOrf4DgU6vBELOnTWPBx6wRfQKiKkKURgyLjR+gEiWyssUhV3qGsQr:bZOr1WoWnRFQRpEqsFhDj
- TLSH T18BA67C13F29501D9E16ED1788B6A5232AA72BC8A4B30B2DF3A4C76151F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory