General
- Target 2026-08-20_ff5adf57883f5f6ac97a923024a55969_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 3.5MB
- Sample260820-he7qca1eqb
- SHA256 514c2c1cf75f6ccd4ace134d3bffd0ab3bb54d27416f90d04a381a7dce38894d
- MD5 ff5adf57883f5f6ac97a923024a55969
- SHA1 9002362a741f63b474e71174faf94b0c0bce40fa
- SHA512 84b8b247c48d90d34c3a88143db33149cb89514842f02f610769833460d04a33dc77c658eb902eee5a9fd6046d6052cdec9ea5e3cb1128fbf742d48bfde9df4e
- SSDEEP 49152:Wo7vl9mndWLKf2n2XwetPtELxiFZmF5Jbb9+d9jS7Dbvt/CY2e30jaNf1TWbdz:zbJz7yU023W
- TLSH T1CB06290273E90789F2F78B78C976A2129472BC2D9B12D7EF1554014A1F23BE58979B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_ff5adf57883f5f6ac97a923024a55969_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_ff5adf57883f5f6ac97a923024a55969_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_ff5adf57883f5f6ac97a923024a55969_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 3.5MB
- SHA256 514c2c1cf75f6ccd4ace134d3bffd0ab3bb54d27416f90d04a381a7dce38894d
- MD5 ff5adf57883f5f6ac97a923024a55969
- SHA1 9002362a741f63b474e71174faf94b0c0bce40fa
- SHA512 84b8b247c48d90d34c3a88143db33149cb89514842f02f610769833460d04a33dc77c658eb902eee5a9fd6046d6052cdec9ea5e3cb1128fbf742d48bfde9df4e
- SSDEEP 49152:Wo7vl9mndWLKf2n2XwetPtELxiFZmF5Jbb9+d9jS7Dbvt/CY2e30jaNf1TWbdz:zbJz7yU023W
- TLSH T1CB06290273E90789F2F78B78C976A2129472BC2D9B12D7EF1554014A1F23BE58979B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory