General
- Target 2026-08-10_e68b3bab4cae4b832fc84e8352f7d02a_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.6MB
- Sample260810-wpthcszvaz
- SHA256 e6629a30b915318c37e17a9766eee629e5bbc93e13523c58a2c26041c5734485
- MD5 e68b3bab4cae4b832fc84e8352f7d02a
- SHA1 d20d22b5ee810884974440bcf4a777dd2a1b96fd
- SHA512 604125ce1a42f949e7385cda5737400c3cf5aaf36b945e32a589d4f4f1e897a36f40d22873730e18dfeac36cd1c4f888ec05a7529b02009a52e915bb24ba41d3
- SSDEEP 98304:ISpbOrf4DgU6vBELOnTWPBx6wRfQKiKkKURgyLjR+gEiWyssUhV0+k:rZOr1WoWnRFQRpEqsFhy+k
- TLSH T13CA67C13F29501D9E16ED1788B6A5232AA72BC8A4B30B2DF3A4C76151F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_e68b3bab4cae4b832fc84e8352f7d02a_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_e68b3bab4cae4b832fc84e8352f7d02a_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 9.6MB
- SHA256 e6629a30b915318c37e17a9766eee629e5bbc93e13523c58a2c26041c5734485
- MD5 e68b3bab4cae4b832fc84e8352f7d02a
- SHA1 d20d22b5ee810884974440bcf4a777dd2a1b96fd
- SHA512 604125ce1a42f949e7385cda5737400c3cf5aaf36b945e32a589d4f4f1e897a36f40d22873730e18dfeac36cd1c4f888ec05a7529b02009a52e915bb24ba41d3
- SSDEEP 98304:ISpbOrf4DgU6vBELOnTWPBx6wRfQKiKkKURgyLjR+gEiWyssUhV0+k:rZOr1WoWnRFQRpEqsFhy+k
- TLSH T13CA67C13F29501D9E16ED1788B6A5232AA72BC8A4B30B2DF3A4C76151F75FE05B3C724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory