General
- Target 2026-08-10_8003b7eb1d13f4224ef8bdc50248c479_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 8.7MB
- Sample260810-3sft1a1fnd
- SHA256 886a7a86da04bf8a381e0fb1920f50132d602655e6849345b67b5d2f04fa6ec3
- MD5 8003b7eb1d13f4224ef8bdc50248c479
- SHA1 725ed3c1472c42347f59188e29288d035127a2a6
- SHA512 5ed23e55d5ccefd1f36d3c3f0639e1bf4541faa2a56c21194d060b579a1662e10c37c4ba4a266aae79f277f87039588e6eb6b7b77d6d34937e8df53db5e25fd5
- SSDEEP 98304:bfBUM21v52528IWw60orjd+bIqLChhYRliSEIpv35JuI:LyPv5d8IWfrjAMYChhYH8CJuI
- TLSH T14F969E4DAC570DDDF9CE9B386CAD72079C23B9B5162947BF4AEC09A5032A6800FD7247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_8003b7eb1d13f4224ef8bdc50248c479_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_8003b7eb1d13f4224ef8bdc50248c479_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_8003b7eb1d13f4224ef8bdc50248c479_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 8.7MB
- SHA256 886a7a86da04bf8a381e0fb1920f50132d602655e6849345b67b5d2f04fa6ec3
- MD5 8003b7eb1d13f4224ef8bdc50248c479
- SHA1 725ed3c1472c42347f59188e29288d035127a2a6
- SHA512 5ed23e55d5ccefd1f36d3c3f0639e1bf4541faa2a56c21194d060b579a1662e10c37c4ba4a266aae79f277f87039588e6eb6b7b77d6d34937e8df53db5e25fd5
- SSDEEP 98304:bfBUM21v52528IWw60orjd+bIqLChhYRliSEIpv35JuI:LyPv5d8IWfrjAMYChhYH8CJuI
- TLSH T14F969E4DAC570DDDF9CE9B386CAD72079C23B9B5162947BF4AEC09A5032A6800FD7247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1