General
- Target 2026-08-12_ab53efd9b0413c522eb72c771d796bcc_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.2MB
- Sample260812-rnw5mshr91
- SHA256 97caf4ed69ea6103c1ef56a9cc59b4304820337fe94ac5827db2132bc36fff63
- MD5 ab53efd9b0413c522eb72c771d796bcc
- SHA1 eea73cf5846f4b9ec06b3edeac16313a2b3e84b4
- SHA512 f97b523f6a150b1e3db30a285beb9abdb5cce5c641add2fded9681551b82fc52d09dbdd39101b3c5fe4d4703921a51fa03b0c0b58f330b06c37d3e5d1b0e49c6
- SSDEEP 49152:GJM9H8yR8doB3zB1pOO0CGOrUhU9DWpXWqCzGxSjqtcgbJDawSVfB/maLPre8Fd6:Dcm71wi3g87NLTbUMOl
- TLSH T1C3269D03F2DA41D8C019D1B98B4A8632FA61BC855B35B6DF0B9076122F76EE49F7E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_ab53efd9b0413c522eb72c771d796bcc_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_ab53efd9b0413c522eb72c771d796bcc_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.2MB
- SHA256 97caf4ed69ea6103c1ef56a9cc59b4304820337fe94ac5827db2132bc36fff63
- MD5 ab53efd9b0413c522eb72c771d796bcc
- SHA1 eea73cf5846f4b9ec06b3edeac16313a2b3e84b4
- SHA512 f97b523f6a150b1e3db30a285beb9abdb5cce5c641add2fded9681551b82fc52d09dbdd39101b3c5fe4d4703921a51fa03b0c0b58f330b06c37d3e5d1b0e49c6
- SSDEEP 49152:GJM9H8yR8doB3zB1pOO0CGOrUhU9DWpXWqCzGxSjqtcgbJDawSVfB/maLPre8Fd6:Dcm71wi3g87NLTbUMOl
- TLSH T1C3269D03F2DA41D8C019D1B98B4A8632FA61BC855B35B6DF0B9076122F76EE49F7E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory