General
- Target 2026-08-10_88f62d58a71367115a3067c30d10ab85_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 5.5MB
- Sample260810-3q5ekswybz
- SHA256 b461b9a6e78c0b913d273d9947a6be1bd7d3573669eb9010d020423e7f0d5f28
- MD5 88f62d58a71367115a3067c30d10ab85
- SHA1 e93086afa613611ced7bfdc627064e1398b1edb8
- SHA512 bc1983391490d6b2f8a8fafd51c1c0685c6d297726ff61444370295384d7e2fe2c1dfdd87a76ade1e8f6a86d50f8db3bf4e2f6e545882c33651800c62ee683c8
- SSDEEP 98304:9fRqn+QsCRJk9Ei1o4O/z7hpEHk1v9k0ghv9P9:++XCRw9O/z/Mk1VrghV1
- TLSH T184468D86A2AA07D8DA7ED0388B069717FEA13451037197DB369C07525FF37A0AE7E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_88f62d58a71367115a3067c30d10ab85_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_88f62d58a71367115a3067c30d10ab85_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
exe.dropper
https://freemasonry.dev/dl/0d22b5b683d625fb1029a0ea00cec302/raw
Targets
-
- Target 2026-08-10_88f62d58a71367115a3067c30d10ab85_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 5.5MB
- SHA256 b461b9a6e78c0b913d273d9947a6be1bd7d3573669eb9010d020423e7f0d5f28
- MD5 88f62d58a71367115a3067c30d10ab85
- SHA1 e93086afa613611ced7bfdc627064e1398b1edb8
- SHA512 bc1983391490d6b2f8a8fafd51c1c0685c6d297726ff61444370295384d7e2fe2c1dfdd87a76ade1e8f6a86d50f8db3bf4e2f6e545882c33651800c62ee683c8
- SSDEEP 98304:9fRqn+QsCRJk9Ei1o4O/z7hpEHk1v9k0ghv9P9:++XCRw9O/z/Mk1VrghV1
- TLSH T184468D86A2AA07D8DA7ED0388B069717FEA13451037197DB369C07525FF37A0AE7E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10