General
- Target 2026-08-11_ad8dbe86f083f76bedca66c661b92353_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 1.5MB
- Sample260811-c3c8rateke
- SHA256 c3a3e7aac88e85a4645b21e599448bd1a18d3e58ffa61684e6f349eeed5f78b6
- MD5 ad8dbe86f083f76bedca66c661b92353
- SHA1 20e1ed0985521c7dd05162e48007712a56f4f0bf
- SHA512 ed16c0a4db772415a2a7d4cb3021ff6d1cd077b1082eecf048fcec86e8b379197c327b33ba1878fa1424e97534f077435e67c687c48a1d86080e4623e588dc9a
- SSDEEP 24576:FzgkoVhTvbvAPt2A5qYPp7Om45/8wU4acbphXGaCm8AdGy+bRywD:FxSvbvIRx7m1FbphWB8+lyw
- TLSH T1D3655B26665800ACE0B6D1F8DB165C13D771B84A0335AEEF47D069B31F176E88A7EF12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-11_ad8dbe86f083f76bedca66c661b92353_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_ad8dbe86f083f76bedca66c661b92353_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_ad8dbe86f083f76bedca66c661b92353_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 1.5MB
- SHA256 c3a3e7aac88e85a4645b21e599448bd1a18d3e58ffa61684e6f349eeed5f78b6
- MD5 ad8dbe86f083f76bedca66c661b92353
- SHA1 20e1ed0985521c7dd05162e48007712a56f4f0bf
- SHA512 ed16c0a4db772415a2a7d4cb3021ff6d1cd077b1082eecf048fcec86e8b379197c327b33ba1878fa1424e97534f077435e67c687c48a1d86080e4623e588dc9a
- SSDEEP 24576:FzgkoVhTvbvAPt2A5qYPp7Om45/8wU4acbphXGaCm8AdGy+bRywD:FxSvbvIRx7m1FbphWB8+lyw
- TLSH T1D3655B26665800ACE0B6D1F8DB165C13D771B84A0335AEEF47D069B31F176E88A7EF12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Detects executables embedding command execution via IExecuteCommand COM object
-
Detects executables referencing many IR and analysis tools
-
Suspicious use of SetThreadContext