General
- Target 2026-08-16_6211eb534a3d882ba8e46e6874f93caf_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 1.5MB
- Sample260816-wg1ayatdnb
- SHA256 d5b523233d25d49e747be4d9c5140c46f7c4454cf5708cd372ccfb98c22e31e9
- MD5 6211eb534a3d882ba8e46e6874f93caf
- SHA1 fd0100e820de5edae9329ecef5d2d1941aef85e1
- SHA512 afe28e65a2f9c7036a0ccca542107aa8dee559d47222107d90c401b0b1b366801e02312d309dd9223531eba61023e6ea7be05256e82f38684b56f17c27b2b7e9
- SSDEEP 24576:Fqxp/IRILRdE6IV7Y4OSG5SSiVw6uAX8DS52tpz9ZRzbPmSZyo:FqPndExu3d5SW6H8DS52tdDpbRZy
- TLSH T1E175AE1C6EE502B9E1F7C770C9A16506E6717C86873C95EF03D1C2994E329EACA39F21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_6211eb534a3d882ba8e46e6874f93caf_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_6211eb534a3d882ba8e46e6874f93caf_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 1.5MB
- SHA256 d5b523233d25d49e747be4d9c5140c46f7c4454cf5708cd372ccfb98c22e31e9
- MD5 6211eb534a3d882ba8e46e6874f93caf
- SHA1 fd0100e820de5edae9329ecef5d2d1941aef85e1
- SHA512 afe28e65a2f9c7036a0ccca542107aa8dee559d47222107d90c401b0b1b366801e02312d309dd9223531eba61023e6ea7be05256e82f38684b56f17c27b2b7e9
- SSDEEP 24576:Fqxp/IRILRdE6IV7Y4OSG5SSiVw6uAX8DS52tpz9ZRzbPmSZyo:FqPndExu3d5SW6H8DS52tdDpbRZy
- TLSH T1E175AE1C6EE502B9E1F7C770C9A16506E6717C86873C95EF03D1C2994E329EACA39F21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1