e44523d34c3b5fd3cc27a585ae2238ba91f10d10a05c80a29747882ba85f51e5 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-08-08...om.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_5a05566c52a8e425154c19d568e29c25_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
Size 9.7MB
Sample260808-ny8dwaep2z
SHA256 e44523d34c3b5fd3cc27a585ae2238ba91f10d10a05c80a29747882ba85f51e5
MD5 5a05566c52a8e425154c19d568e29c25
SHA1 7fc1badd10a8791c12fd86be06bfb171f7c339e6
SHA512 47096c049bd94f682113096dd229202354d02ef81aae016e5408abe97583370b275c529e6926ab9dbc9e4d98bca914fef64b73e11ee1c9c169ad700b734fe939
SSDEEP 98304:qaytBxqFVdaUoNVaGa+1z4XNqq5tP7bnAyhVP7wRGpj3:qBeV4kNl5lnhhF9
TLSH
T1F2A66B13F29901D8E06ED5788B6A5232A972BC8A4B30B2DF3A5C76151F75FE05B3C724
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery ransomware spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-08_5a05566c52a8e425154c19d568e29c25_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

16 signatures

150 seconds

defense_evasion discovery ransomware spyware stealer trojan

Malware Config

Targets

- Target
  2026-08-08_5a05566c52a8e425154c19d568e29c25_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.7MB
- SHA256 e44523d34c3b5fd3cc27a585ae2238ba91f10d10a05c80a29747882ba85f51e5
- MD5 5a05566c52a8e425154c19d568e29c25
- SHA1 7fc1badd10a8791c12fd86be06bfb171f7c339e6
- SHA512 47096c049bd94f682113096dd229202354d02ef81aae016e5408abe97583370b275c529e6926ab9dbc9e4d98bca914fef64b73e11ee1c9c169ad700b734fe939
- SSDEEP 98304:qaytBxqFVdaUoNVaGa+1z4XNqq5tP7bnAyhVP7wRGpj3:qBeV4kNl5lnhhF9
- TLSH
  T1F2A66B13F29901D8E06ED5788B6A5232A972BC8A4B30B2DF3A5C76151F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery ransomware spyware stealer trojan
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks whether UAC is enabled
  defense_evasion trojan
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryransomwarespywarestealertrojan

© 2018-2026

Terms | Privacy