General
- Target 2026-08-07_d71137c332179493731b0a83436abb9e_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 482KB
- Sample260807-ltfryssblf
- SHA256 0eba67e92b9241d7e0fadc7e00fdca9d981df598a1c4a36fcfcb4519cc4fb016
- MD5 d71137c332179493731b0a83436abb9e
- SHA1 117061a099b59c9a8741d4001907295f7cbae22e
- SHA512 01218be15a68c0916ff4809dfb18978c27917920dd4a911dcfde5788f3c468363db4b1efc1941a43e66fe9ef2c0260597a45f79e03ab24440214dedb39cbb436
- SSDEEP 6144:p+GYnA0zeW8Di50JziQ8kd3f+RysMFZzN/E/msHOtbSiqNsarwP8DRUTBbAMpgYS:pYCDi50NiQDuysMFZzN/E/msup7s9+
- TLSH T175B47C06F79408FDD49B8174C9A24546DB36BC9A0B71EBDF1798522A2F337E04E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-07_d71137c332179493731b0a83436abb9e_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_d71137c332179493731b0a83436abb9e_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_d71137c332179493731b0a83436abb9e_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 482KB
- SHA256 0eba67e92b9241d7e0fadc7e00fdca9d981df598a1c4a36fcfcb4519cc4fb016
- MD5 d71137c332179493731b0a83436abb9e
- SHA1 117061a099b59c9a8741d4001907295f7cbae22e
- SHA512 01218be15a68c0916ff4809dfb18978c27917920dd4a911dcfde5788f3c468363db4b1efc1941a43e66fe9ef2c0260597a45f79e03ab24440214dedb39cbb436
- SSDEEP 6144:p+GYnA0zeW8Di50JziQ8kd3f+RysMFZzN/E/msHOtbSiqNsarwP8DRUTBbAMpgYS:pYCDi50NiQDuysMFZzN/E/msup7s9+
- TLSH T175B47C06F79408FDD49B8174C9A24546DB36BC9A0B71EBDF1798522A2F337E04E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association