General
- Target 2026-08-07_a8dde6e9e8a3f094215f4f77776db792_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 377KB
- Sample260807-nfn8aacp2s
- SHA256 cd861c9815215fe317015117072b019d740b85ec0a917f356fe1c61f571dc497
- MD5 a8dde6e9e8a3f094215f4f77776db792
- SHA1 a2302926029f257bff87c94bd4aace62442341b6
- SHA512 5219c0791588b49661f44cfb9a5a1810fd7c27a173c455cae7f8e253a48d583f225e45708b80299736d330ca210d44e9df08f957a6de878d730fef18f10a56c6
- SSDEEP 6144:p+GYnA0zeW8Di50JziQ8kd3f+RysMFZzN/E/msHOtbSiqNsarw/:pYCDi50NiQDuysMFZzN/E/msup7sG
- TLSH T10E848C06F75408F9D59BC57489924546DA39BC8F1B72EAEF17C8422A2F237F08E39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-07_a8dde6e9e8a3f094215f4f77776db792_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_a8dde6e9e8a3f094215f4f77776db792_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_a8dde6e9e8a3f094215f4f77776db792_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 377KB
- SHA256 cd861c9815215fe317015117072b019d740b85ec0a917f356fe1c61f571dc497
- MD5 a8dde6e9e8a3f094215f4f77776db792
- SHA1 a2302926029f257bff87c94bd4aace62442341b6
- SHA512 5219c0791588b49661f44cfb9a5a1810fd7c27a173c455cae7f8e253a48d583f225e45708b80299736d330ca210d44e9df08f957a6de878d730fef18f10a56c6
- SSDEEP 6144:p+GYnA0zeW8Di50JziQ8kd3f+RysMFZzN/E/msHOtbSiqNsarw/:pYCDi50NiQDuysMFZzN/E/msup7sG
- TLSH T10E848C06F75408F9D59BC57489924546DA39BC8F1B72EAEF17C8422A2F237F08E39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association