General
- Target 2026-08-09_2d18486e5956927f4bc4778d35472d8e_amadey_cobalt-strike_glassworm_icedid_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 529KB
- Sample260809-yqrfhavdrc
- SHA256 62ffcea311d03f001a73996937226a635c7f1f01e24b69bce2d225d141d13104
- MD5 2d18486e5956927f4bc4778d35472d8e
- SHA1 9d925ab84c96c1231a355f26cc13f26ba8d82cbc
- SHA512 357c7844b8923c38987fa2ad5f3c4f7a63c11980409ceb3f6c7507d3025a6214e604e449b9791fa611cecfa0421b4d40de611edac8c65b6c1330fa69462bf1c9
- SSDEEP 12288:pYCDi50NiQOuysMFZzN/E/msup7sxCiB+FqI:69ogT4CiB/I
- TLSH T11BB46D02F7E404FDF4A78634897246569A75BC674B31EAEF07C402291F32AE08E35B76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_2d18486e5956927f4bc4778d35472d8e_amadey_cobalt-strike_glassworm_icedid_remcos_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_2d18486e5956927f4bc4778d35472d8e_amadey_cobalt-strike_glassworm_icedid_remcos_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_2d18486e5956927f4bc4778d35472d8e_amadey_cobalt-strike_glassworm_icedid_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 529KB
- SHA256 62ffcea311d03f001a73996937226a635c7f1f01e24b69bce2d225d141d13104
- MD5 2d18486e5956927f4bc4778d35472d8e
- SHA1 9d925ab84c96c1231a355f26cc13f26ba8d82cbc
- SHA512 357c7844b8923c38987fa2ad5f3c4f7a63c11980409ceb3f6c7507d3025a6214e604e449b9791fa611cecfa0421b4d40de611edac8c65b6c1330fa69462bf1c9
- SSDEEP 12288:pYCDi50NiQOuysMFZzN/E/msup7sxCiB+FqI:69ogT4CiB/I
- TLSH T11BB46D02F7E404FDF4A78634897246569A75BC674B31EAEF07C402291F32AE08E35B76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association