General
- Target 2026-08-09_2b348a66e58b6e437f69425959adde0e_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.2MB
- Sample260809-vk48maap2w
- SHA256 2ee9189c7322246364ec66327c2235d3ebd61d88fc6fb48b29abe29ba32c03b3
- MD5 2b348a66e58b6e437f69425959adde0e
- SHA1 067d8fff9313b4dd2f77613d3d7b30aad0b9ad9e
- SHA512 5aa25bbd838afb50ced38e54efe30c14c143f5ff2087b8cec3a56e1dc1940f0975a6acb4bf12867707ebb60413c53caae343c78a09053181df9da9492d7a9587
- SSDEEP 49152:/JM9H8yR8doB3zB1pOn0CGOrUhU9DWpXWqCzGxSjqtcgbJDawSVfB/maLPre8FdN:Ccm7Swi3g87NLTeB2Yyjl
- TLSH T1BA269D03F2DA41D8C059D1B88B4A8632FA61BC855B35B6DF079076122F7AEE49F7E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_2b348a66e58b6e437f69425959adde0e_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_2b348a66e58b6e437f69425959adde0e_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.2MB
- SHA256 2ee9189c7322246364ec66327c2235d3ebd61d88fc6fb48b29abe29ba32c03b3
- MD5 2b348a66e58b6e437f69425959adde0e
- SHA1 067d8fff9313b4dd2f77613d3d7b30aad0b9ad9e
- SHA512 5aa25bbd838afb50ced38e54efe30c14c143f5ff2087b8cec3a56e1dc1940f0975a6acb4bf12867707ebb60413c53caae343c78a09053181df9da9492d7a9587
- SSDEEP 49152:/JM9H8yR8doB3zB1pOn0CGOrUhU9DWpXWqCzGxSjqtcgbJDawSVfB/maLPre8FdN:Ccm7Swi3g87NLTeB2Yyjl
- TLSH T1BA269D03F2DA41D8C059D1B88B4A8632FA61BC855B35B6DF079076122F7AEE49F7E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory