General
- Target 2026-08-10_52a8859afd4f430f24f741f2d06f6239_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 754KB
- Sample260810-2g4k9avybx
- SHA256 aab9b53e6910ccf1a054306adf4735337033eb12bef464a059f91a17c005fcc2
- MD5 52a8859afd4f430f24f741f2d06f6239
- SHA1 6e870b27c23da795ea56689747ac079e3e61b655
- SHA512 94062915103e819dd1cf1493f123f2ac6fd3afa494e1b6f65c407b83e4480eb207c9a0de9838dfa40b85330e8149d7100fe69551ab6fdb88290ad13c7910aa2f
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msuY7s9jYCDi50NiQDuysMFZzN/E/msuY7s9t:693gewE93gewt
- TLSH T196F48C06F75408F9D59BC57489A24546DA39BC8F1B72EADF17C8422A2F237F08E39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-10_52a8859afd4f430f24f741f2d06f6239_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_52a8859afd4f430f24f741f2d06f6239_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_52a8859afd4f430f24f741f2d06f6239_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 754KB
- SHA256 aab9b53e6910ccf1a054306adf4735337033eb12bef464a059f91a17c005fcc2
- MD5 52a8859afd4f430f24f741f2d06f6239
- SHA1 6e870b27c23da795ea56689747ac079e3e61b655
- SHA512 94062915103e819dd1cf1493f123f2ac6fd3afa494e1b6f65c407b83e4480eb207c9a0de9838dfa40b85330e8149d7100fe69551ab6fdb88290ad13c7910aa2f
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msuY7s9jYCDi50NiQDuysMFZzN/E/msuY7s9t:693gewE93gewt
- TLSH T196F48C06F75408F9D59BC57489A24546DA39BC8F1B72EADF17C8422A2F237F08E39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association