General
- Target 2026-08-18_705c87a274897e9cfbd6bc7dcc5e887c_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.2MB
- Sample260818-v9a13sae48
- SHA256 edb0ac7d0894d48041bd11ee72026934e5d2d604a7d1e39e3b22d9351ef8ee5a
- MD5 705c87a274897e9cfbd6bc7dcc5e887c
- SHA1 0d07d9974f0e861e71f60129428661a577ff51de
- SHA512 578765f8106c6ac789f7bdc91ff8313a24f2664259543dabb81426b7359da6e9f67f416041037d124f3c10f5ada3dbef406397ea064ac892a01db7616e6b5df7
- SSDEEP 49152:7A9d+y3FeqamBiUhq11NqNFHAEGnQayBpaplDDSni6lNtVF2xxPWS5Pl/B+kn3Hx:XoJCU+8WERSDqQZn+k
- TLSH T174269D13F1DA11D8C059D1B98B4B9632EA71BC494B35B2DF0B9076222B7AEE09F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_705c87a274897e9cfbd6bc7dcc5e887c_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_705c87a274897e9cfbd6bc7dcc5e887c_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.2MB
- SHA256 edb0ac7d0894d48041bd11ee72026934e5d2d604a7d1e39e3b22d9351ef8ee5a
- MD5 705c87a274897e9cfbd6bc7dcc5e887c
- SHA1 0d07d9974f0e861e71f60129428661a577ff51de
- SHA512 578765f8106c6ac789f7bdc91ff8313a24f2664259543dabb81426b7359da6e9f67f416041037d124f3c10f5ada3dbef406397ea064ac892a01db7616e6b5df7
- SSDEEP 49152:7A9d+y3FeqamBiUhq11NqNFHAEGnQayBpaplDDSni6lNtVF2xxPWS5Pl/B+kn3Hx:XoJCU+8WERSDqQZn+k
- TLSH T174269D13F1DA11D8C059D1B98B4B9632EA71BC494B35B2DF0B9076222B7AEE09F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory