General
- Target 2026-08-20_93b8bc3ae04c1dde3bde60183bb629aa_cobalt-strike_glassworm_icedid_satacom_vidar
- Size 458KB
- Sample260820-pderhawfke
- SHA256 c8ba8ca83826f477ca39064c13ec2e81b56bef32640750a31478022eb9b5b509
- MD5 93b8bc3ae04c1dde3bde60183bb629aa
- SHA1 88dd3c6dec20c8d2a328735d7a234f8dc8bdb45a
- SHA512 442364239d824dfde678ff8f8c6a21c7052b63df251ed53bb464257b94d9a1cda868ae408d08cb29a2244efd10732ca3c2ef4a14d0ded3971afe06c91d1def41
- SSDEEP 6144:Yx2yZsqfk2i643G4rLbxl/8uUPrTwrXXULPHhyLvyAQLa2YKq9:YEynU62zjUQBMY9
- TLSH T1E8A4A40265938360D5E26EFE45E2042243B8BC5EEE31B73777DC169A6E4EB67CDC1620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
7 signatures
Behavioral task
behavioral1
Sample
2026-08-20_93b8bc3ae04c1dde3bde60183bb629aa_cobalt-strike_glassworm_icedid_satacom_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_93b8bc3ae04c1dde3bde60183bb629aa_cobalt-strike_glassworm_icedid_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_93b8bc3ae04c1dde3bde60183bb629aa_cobalt-strike_glassworm_icedid_satacom_vidar
- Size 458KB
- SHA256 c8ba8ca83826f477ca39064c13ec2e81b56bef32640750a31478022eb9b5b509
- MD5 93b8bc3ae04c1dde3bde60183bb629aa
- SHA1 88dd3c6dec20c8d2a328735d7a234f8dc8bdb45a
- SHA512 442364239d824dfde678ff8f8c6a21c7052b63df251ed53bb464257b94d9a1cda868ae408d08cb29a2244efd10732ca3c2ef4a14d0ded3971afe06c91d1def41
- SSDEEP 6144:Yx2yZsqfk2i643G4rLbxl/8uUPrTwrXXULPHhyLvyAQLa2YKq9:YEynU62zjUQBMY9
- TLSH T1E8A4A40265938360D5E26EFE45E2042243B8BC5EEE31B73777DC169A6E4EB67CDC1620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables Discord URL observed in first stage droppers
-
Detects executables packed with Babel
-
Detects executables packed with Dotfuscator
-
Detects executables packed with Goliath
-
Detects executables packed with SmartAssembly
-
Detects executables packed with dotNetProtector
-
Executes dropped EXE
-
SmartAssembly .NET packer
Detects SmartAssembly .NET packer.