General
- Target 2026-08-12_c0ae7d40dbaf3e316a67c4cbdb1b282b_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.8MB
- Sample260812-lsdwza1th1
- SHA256 c87bbb92e68d7c97abb6c5b64c34a279d51f433957f0336f818ecf536c834d39
- MD5 c0ae7d40dbaf3e316a67c4cbdb1b282b
- SHA1 2aeaaa412240eb8550f1c3dd3580d07d50dd2e56
- SHA512 ebdc70d338304aa1b921c64229119d624d628298936ba3f9e29c63ce028955d192b2cd6cac59efe130d7bcb1c19867c27e3a0a25ec3944f006dbf91c47525799
- SSDEEP 49152:bqiA8AH/P1f/+ycKpiEfPR6ylTuv4ozNI/AnzDcIfIExXbA4TQQ/lFTjN4:NmVzcc6y6Pn5/NjLm
- TLSH T1B7368C23F68902F5C09AC175D7774272E626BC2A2F2561EF264CB1141F7AAE047BF358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_c0ae7d40dbaf3e316a67c4cbdb1b282b_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_c0ae7d40dbaf3e316a67c4cbdb1b282b_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.8MB
- SHA256 c87bbb92e68d7c97abb6c5b64c34a279d51f433957f0336f818ecf536c834d39
- MD5 c0ae7d40dbaf3e316a67c4cbdb1b282b
- SHA1 2aeaaa412240eb8550f1c3dd3580d07d50dd2e56
- SHA512 ebdc70d338304aa1b921c64229119d624d628298936ba3f9e29c63ce028955d192b2cd6cac59efe130d7bcb1c19867c27e3a0a25ec3944f006dbf91c47525799
- SSDEEP 49152:bqiA8AH/P1f/+ycKpiEfPR6ylTuv4ozNI/AnzDcIfIExXbA4TQQ/lFTjN4:NmVzcc6y6Pn5/NjLm
- TLSH T1B7368C23F68902F5C09AC175D7774272E626BC2A2F2561EF264CB1141F7AAE047BF358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory