General
- Target 2026-08-19_44914c74664a444e7dd6e7072f8b6019_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 46.4MB
- Sample260819-glfprsel81
- SHA256 44a005afd0560c6e5a302563cb1bab36d23d5477358b5f1d641d9f635a33e152
- MD5 44914c74664a444e7dd6e7072f8b6019
- SHA1 824e127102e88b2b7e8f06550209caec1d468d19
- SHA512 4a7725f5624d508d775eea900df0e7a5ff66ee5c5900260999bc043757acc9a5e1031ed879131cb5fe70068a81abf55e40941c245e2349379519b612fad9fef3
- SSDEEP 393216:0z9acPaemDUSCMWtu2hsnoKEtKDengbdK7fVJf7CGVZBS9MgDKGo9QwJOsG1doxw:jRK9J7wb+iG8xmM
- TLSH T11BB77C9673F441EAE1AED134C9678A37EAB1BC451430434B2560FB9BAF33660AD3D361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-19_44914c74664a444e7dd6e7072f8b6019_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_44914c74664a444e7dd6e7072f8b6019_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_44914c74664a444e7dd6e7072f8b6019_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 46.4MB
- SHA256 44a005afd0560c6e5a302563cb1bab36d23d5477358b5f1d641d9f635a33e152
- MD5 44914c74664a444e7dd6e7072f8b6019
- SHA1 824e127102e88b2b7e8f06550209caec1d468d19
- SHA512 4a7725f5624d508d775eea900df0e7a5ff66ee5c5900260999bc043757acc9a5e1031ed879131cb5fe70068a81abf55e40941c245e2349379519b612fad9fef3
- SSDEEP 393216:0z9acPaemDUSCMWtu2hsnoKEtKDengbdK7fVJf7CGVZBS9MgDKGo9QwJOsG1doxw:jRK9J7wb+iG8xmM
- TLSH T11BB77C9673F441EAE1AED134C9678A37EAB1BC451430434B2560FB9BAF33660AD3D361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association