General
- Target 2026-08-18_b767d8bbec38c44c71c45b90ba805ace_cobalt-strike_glassworm_satacom_vidar
- Size 4.8MB
- Sample260818-ccapyat1h1
- SHA256 862b22895016de18f7acd89d98b1ba3adb33177b7b6f7bad0ea8498e2ff3673b
- MD5 b767d8bbec38c44c71c45b90ba805ace
- SHA1 d94aae6a331afd5c81d977ff30815396e9f4c00f
- SHA512 461cf22ffe4578bb64ca77f85a64eedf41d05465e42ef8b6f4cd6612623f5641afc2102dff835ed93a9eea5b2d74f44522282535e6ed931fa3b47102ac51683c
- SSDEEP 49152:3mZbtrm87A0XPtyj7EF6piCja78JdYx+FcEVfDC+7EpT37iATbgoOHTemY2XmFJS:XVxbLLozmY2XW6jBYeJYLm
- TLSH T147368D26716A01F9D07BC278868BD977E6327C16032186DF02D07E673E7BAE45E3E611
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_b767d8bbec38c44c71c45b90ba805ace_cobalt-strike_glassworm_satacom_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_b767d8bbec38c44c71c45b90ba805ace_cobalt-strike_glassworm_satacom_vidar
- Size 4.8MB
- SHA256 862b22895016de18f7acd89d98b1ba3adb33177b7b6f7bad0ea8498e2ff3673b
- MD5 b767d8bbec38c44c71c45b90ba805ace
- SHA1 d94aae6a331afd5c81d977ff30815396e9f4c00f
- SHA512 461cf22ffe4578bb64ca77f85a64eedf41d05465e42ef8b6f4cd6612623f5641afc2102dff835ed93a9eea5b2d74f44522282535e6ed931fa3b47102ac51683c
- SSDEEP 49152:3mZbtrm87A0XPtyj7EF6piCja78JdYx+FcEVfDC+7EpT37iATbgoOHTemY2XmFJS:XVxbLLozmY2XW6jBYeJYLm
- TLSH T147368D26716A01F9D07BC278868BD977E6327C16032186DF02D07E673E7BAE45E3E611
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1