General
- Target 2026-08-19_ba6e7197e0df3bd0c96731252ed252d5_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 13.2MB
- Sample260819-e69r8syvds
- SHA256 b34c09464cfda7bb12885f6a7ecbfa92807e3094999695e1af393b89918fd003
- MD5 ba6e7197e0df3bd0c96731252ed252d5
- SHA1 0c7dfc766d9f0c28aac461ccb15c1019d84a7373
- SHA512 fa8b22f95d3d4afc47190f774b52721bdaea1a626d992e7f392ae0908731599aba46335190c1264a71946c5a3d5a117431effb84d9ebdc0eab54bb780a032a6a
- SSDEEP 98304:J5z+9uk1GphQEHcTeqqIRVTYmnbOMt7ZUy6TX0mfsK:/KUGEHcTeqPRqCt9Uy6TX0mkK
- TLSH T142D67E4192E480F7E1AED1F886399532F7713C4A2172D76B0691CA5B2F67730CEA9B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-19_ba6e7197e0df3bd0c96731252ed252d5_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_ba6e7197e0df3bd0c96731252ed252d5_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_ba6e7197e0df3bd0c96731252ed252d5_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 13.2MB
- SHA256 b34c09464cfda7bb12885f6a7ecbfa92807e3094999695e1af393b89918fd003
- MD5 ba6e7197e0df3bd0c96731252ed252d5
- SHA1 0c7dfc766d9f0c28aac461ccb15c1019d84a7373
- SHA512 fa8b22f95d3d4afc47190f774b52721bdaea1a626d992e7f392ae0908731599aba46335190c1264a71946c5a3d5a117431effb84d9ebdc0eab54bb780a032a6a
- SSDEEP 98304:J5z+9uk1GphQEHcTeqqIRVTYmnbOMt7ZUy6TX0mfsK:/KUGEHcTeqPRqCt9Uy6TX0mkK
- TLSH T142D67E4192E480F7E1AED1F886399532F7713C4A2172D76B0691CA5B2F67730CEA9B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association