General
- Target 2026-08-10_2e22126ef1a178f706d47a3fcd68cb52_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.8MB
- Sample260810-ftp3qs1hkf
- SHA256 a39c5a0360c76519d9545d5f735c3bd33d7e3da2f4aff950e04e5a2de8c9acda
- MD5 2e22126ef1a178f706d47a3fcd68cb52
- SHA1 b3de9366b7190d48b6426e4c8e5ee10f787e398b
- SHA512 6a80c294f49ed957718a72c5c6b2f392010e9503f25cec7f573722bfc66d59e5a6fe74ff5db3968194705548b157456a2d181b7b2d0446e98f843a8b36c3c241
- SSDEEP 98304:2vg7okAoDChOnI5Q5DLpY9unSLB2Yyjl:2oEkpChKmQVFlSLZ
- TLSH T1C8867D13F2A501E8D05ED974CF3956329B357C4A8BB0A2EF269436E11A75ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_2e22126ef1a178f706d47a3fcd68cb52_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_2e22126ef1a178f706d47a3fcd68cb52_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.8MB
- SHA256 a39c5a0360c76519d9545d5f735c3bd33d7e3da2f4aff950e04e5a2de8c9acda
- MD5 2e22126ef1a178f706d47a3fcd68cb52
- SHA1 b3de9366b7190d48b6426e4c8e5ee10f787e398b
- SHA512 6a80c294f49ed957718a72c5c6b2f392010e9503f25cec7f573722bfc66d59e5a6fe74ff5db3968194705548b157456a2d181b7b2d0446e98f843a8b36c3c241
- SSDEEP 98304:2vg7okAoDChOnI5Q5DLpY9unSLB2Yyjl:2oEkpChKmQVFlSLZ
- TLSH T1C8867D13F2A501E8D05ED974CF3956329B357C4A8BB0A2EF269436E11A75ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1