General
- Target 2026-08-07_374a184a9d134ccf104e323506caf2c4_cobalt-strike_glassworm_hijackloader_icedid_njrat_ryuk_satacom_vidar
- Size 2.9MB
- Sample260807-tspmgazble
- SHA256 e590ce5a229728eb8806a92398941cbf377d86b75a10d99c2621406eedcb3575
- MD5 374a184a9d134ccf104e323506caf2c4
- SHA1 430a70adc94dcfde8afb126b6f2a5d8612175ea9
- SHA512 f25a04e0e2573977e96750a7e239cc3c3432761be9983b6506b122dfddbd0b5278b59269e0f16f7d81cae9fc1a125b90382d2111f62a3ed8c7c7caab1850de02
- SSDEEP 49152:LHbrWu6elJyY9JG41fIk5YwV9t2DwV9smJ7kgkqj+:Qelz/V/20V5hkgkqj+
- TLSH T197D57C62A19C02EDD81AC17486778B31AD627E4177216DFF076876662F33AE40F3B712
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-07_374a184a9d134ccf104e323506caf2c4_cobalt-strike_glassworm_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_374a184a9d134ccf104e323506caf2c4_cobalt-strike_glassworm_hijackloader_icedid_njrat_ryuk_satacom_vidar
- Size 2.9MB
- SHA256 e590ce5a229728eb8806a92398941cbf377d86b75a10d99c2621406eedcb3575
- MD5 374a184a9d134ccf104e323506caf2c4
- SHA1 430a70adc94dcfde8afb126b6f2a5d8612175ea9
- SHA512 f25a04e0e2573977e96750a7e239cc3c3432761be9983b6506b122dfddbd0b5278b59269e0f16f7d81cae9fc1a125b90382d2111f62a3ed8c7c7caab1850de02
- SSDEEP 49152:LHbrWu6elJyY9JG41fIk5YwV9t2DwV9smJ7kgkqj+:Qelz/V/20V5hkgkqj+
- TLSH T197D57C62A19C02EDD81AC17486778B31AD627E4177216DFF076876662F33AE40F3B712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.