0616c3f292cf3f7084ee96c37a0a25a0a9448055344903765513c7979ef6152a

Resubmissions

13/08/2026, 08:07

260813-j1a4yavdnf3

13/08/2026, 03:39

260813-d7mhnayzgz8

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-13_c0f317ede445134865948731a32b293b_cobalt-strike_glassworm_icedid_njrat_satacom
Size 23.1MB
Sample260813-j1a4yavdnf
SHA256 0616c3f292cf3f7084ee96c37a0a25a0a9448055344903765513c7979ef6152a
MD5 c0f317ede445134865948731a32b293b
SHA1 b942bdd60469a1e12fad62fa44fee24cc5238523
SHA512 dabfb3f53d7a324c26006fce428b6e04dfdd54964f521919f30018dbd6041a725145e42193ab1c6b5a8c0dbbe0526d03e329e9bc500e599df2cb6a9f1fedd5b8
SSDEEP 393216:lq9YLgIfUKOcqx/h9alLV9WbdXQfM6R4RmhdwAn/mWtvSXoWWiZAWam9f+:lqGL58KPqxClLVoYMc3ddn/BtvSXhWiD
TLSH
T134373355EB5140AFD5D7463980A8872AE2737DEA4B6BC9EF0BE1471B0E177E0583E032
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  fake_server.pyc
- Size 22KB
- SHA256 71adcdacf4368e3b2544593b4e5e587a1977db4d204b4092b70db8106ee83a61
- MD5 9ae8da295d86f1909ddb2e12d23b6433
- SHA1 6cb3604c6727465982fdc2f04ed4dbe5ff88c79b
- SHA512 678eeb58313b048f63eb781dc11d0c504421d6c58fd2eb5938e95474775cd70be83e5f8433cae57e9741d44ba831ec841a3262e1313b6ddfe0024270f094c1dc
- SSDEEP 384:n2RjK0Fg7vi8h9j1+BdwUmYHFMVuKiSEa7D3n:2RFQLh9jsB+oHFmP
- TLSH
  T176B2F7F86AE05813FEE4F93871F3E985BB32D1566809C757F224087E6D8A704AE9160D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks