General
- Target 2026-08-12_b6f65d0e155bc2fa7f62269e6b9bbf8c_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom_vidar
- Size 4.0MB
- Sample260812-rl82esyfke
- SHA256 d508edd0b0c011d74206d1e0f71e82c9836f88764613a6f37bf48d16551a7aac
- MD5 b6f65d0e155bc2fa7f62269e6b9bbf8c
- SHA1 83cc735a3c5899f63388e12795971716e2d9f43a
- SHA512 59bc7c83304ca3a84edf5736b6542941455f7b92e3f123bc5e9ba61e4106c1d5acb1664d457cb37c2d3e7a05428fc6b083961ccc03b8cb4e8f4c7d55b215c401
- SSDEEP 49152:M2eKvhu0GLEcy8INIc2l/4LTHpO58omhySaJAYeDDSV1oXBxHvXSUsI+Ju7tNFlS:MtUqFINIcu/434mj24TiLIPPg
- TLSH T1D416AD13F5DA10D8C059D1B8874A9633BA62BC474B35B2DF0B9077512A7AEE0AF3E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_b6f65d0e155bc2fa7f62269e6b9bbf8c_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_b6f65d0e155bc2fa7f62269e6b9bbf8c_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom_vidar
- Size 4.0MB
- SHA256 d508edd0b0c011d74206d1e0f71e82c9836f88764613a6f37bf48d16551a7aac
- MD5 b6f65d0e155bc2fa7f62269e6b9bbf8c
- SHA1 83cc735a3c5899f63388e12795971716e2d9f43a
- SHA512 59bc7c83304ca3a84edf5736b6542941455f7b92e3f123bc5e9ba61e4106c1d5acb1664d457cb37c2d3e7a05428fc6b083961ccc03b8cb4e8f4c7d55b215c401
- SSDEEP 49152:M2eKvhu0GLEcy8INIc2l/4LTHpO58omhySaJAYeDDSV1oXBxHvXSUsI+Ju7tNFlS:MtUqFINIcu/434mj24TiLIPPg
- TLSH T1D416AD13F5DA10D8C059D1B8874A9633BA62BC474B35B2DF0B9077512A7AEE0AF3E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1