General
- Target 2026-08-11_f0bd7e16a70278709bd0398f719fdf86_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.8MB
- Sample260811-la41fazeqb
- SHA256 9bb79c5c33cf4b8ce9f43e345e5b8922e575df709d02e7e08e84a53a7a0ce2ec
- MD5 f0bd7e16a70278709bd0398f719fdf86
- SHA1 48f9ca75fed9df8e64bb4838572f0c31b3487516
- SHA512 e8963b9e70d573339716930ea5ca8a7729068cd148d3264ac9e1e0072f403c00d9578a78fcbcc95169dd24a5b49fcf536ad055897fea3e375dd5655f24352d53
- SSDEEP 98304:E4XUjwAY68lcY49NrUJ8q4PA5qPQq7+k:z8wwgyriW4C+k
- TLSH T10C867D53F2B501E8D05ED9B4CF3A52329A357C4A4BB092EF269436E11A75ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_f0bd7e16a70278709bd0398f719fdf86_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_f0bd7e16a70278709bd0398f719fdf86_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.8MB
- SHA256 9bb79c5c33cf4b8ce9f43e345e5b8922e575df709d02e7e08e84a53a7a0ce2ec
- MD5 f0bd7e16a70278709bd0398f719fdf86
- SHA1 48f9ca75fed9df8e64bb4838572f0c31b3487516
- SHA512 e8963b9e70d573339716930ea5ca8a7729068cd148d3264ac9e1e0072f403c00d9578a78fcbcc95169dd24a5b49fcf536ad055897fea3e375dd5655f24352d53
- SSDEEP 98304:E4XUjwAY68lcY49NrUJ8q4PA5qPQq7+k:z8wwgyriW4C+k
- TLSH T10C867D53F2B501E8D05ED9B4CF3A52329A357C4A4BB092EF269436E11A75ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1