General
- Target 2026-08-15_d4b7ddf6b9189d9c189c12f76009c4b0_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 447KB
- Sample260815-dqscksyth1
- SHA256 e26c10f807ca78c312d5b4b2b71be1b85445cf1381a4614deb94d1a6c6c33b1e
- MD5 d4b7ddf6b9189d9c189c12f76009c4b0
- SHA1 40371a011df9161271c44dba3d13bea717eb8028
- SHA512 7b393fec33eef769356a37dc4127b9a20bfe0f53a4315107dc5dc9d51314abb2a1baa0190603b7dfb4e563af5ca9c9b75babae1a9cc364456932a30668b88858
- SSDEEP 6144:hkENRPYbPlTeCzkMYDqlddyBLscSKbLptYxPe0K9wuCkDoa0LlDynHS0:xDAbP8CAvqpyqcFptYZZuCUUDyZ
- TLSH T1F0A46D25A76804E9E1A7D278CA534902E77678060371EBCF03D4DAB61F276E49E3EF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_d4b7ddf6b9189d9c189c12f76009c4b0_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_d4b7ddf6b9189d9c189c12f76009c4b0_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_d4b7ddf6b9189d9c189c12f76009c4b0_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 447KB
- SHA256 e26c10f807ca78c312d5b4b2b71be1b85445cf1381a4614deb94d1a6c6c33b1e
- MD5 d4b7ddf6b9189d9c189c12f76009c4b0
- SHA1 40371a011df9161271c44dba3d13bea717eb8028
- SHA512 7b393fec33eef769356a37dc4127b9a20bfe0f53a4315107dc5dc9d51314abb2a1baa0190603b7dfb4e563af5ca9c9b75babae1a9cc364456932a30668b88858
- SSDEEP 6144:hkENRPYbPlTeCzkMYDqlddyBLscSKbLptYxPe0K9wuCkDoa0LlDynHS0:xDAbP8CAvqpyqcFptYZZuCUUDyZ
- TLSH T1F0A46D25A76804E9E1A7D278CA534902E77678060371EBCF03D4DAB61F276E49E3EF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.