General
- Target 2026-08-20_8ace25d39ba2187275a6c7ac7686fa3e_cobalt-strike_glassworm_hammertoss_icedid_njrat_satacom
- Size 3.2MB
- Sample260820-pf2n2szvbs
- SHA256 db81f299a58e4135165ddb460f25979f83812c5d09c7d31ae3cfdc1a7ca5039d
- MD5 8ace25d39ba2187275a6c7ac7686fa3e
- SHA1 9dbf943a70ba8315d5bf9c26dc9aacc9b8eadcd4
- SHA512 512086ebf661f855dd8344b1ee25bc75f094cff7648534b432e39cbb5c05668bd62b78f9703d21df754dde13aa339c76cc4fe5bf90b0adaaa2c8a90307c3665d
- SSDEEP 49152:sFX4fkDd3+gKzUIG0f9M134y/Pc4/YaX2BGeO38n9buv:wXsQ+gWxq94uFQamtdq
- TLSH T147F57B83751C12C4DE9A8FB18C814A416E76FDE646A48ECBE14C7421EBB6DF4983CDB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_8ace25d39ba2187275a6c7ac7686fa3e_cobalt-strike_glassworm_hammertoss_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_8ace25d39ba2187275a6c7ac7686fa3e_cobalt-strike_glassworm_hammertoss_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_8ace25d39ba2187275a6c7ac7686fa3e_cobalt-strike_glassworm_hammertoss_icedid_njrat_satacom
- Size 3.2MB
- SHA256 db81f299a58e4135165ddb460f25979f83812c5d09c7d31ae3cfdc1a7ca5039d
- MD5 8ace25d39ba2187275a6c7ac7686fa3e
- SHA1 9dbf943a70ba8315d5bf9c26dc9aacc9b8eadcd4
- SHA512 512086ebf661f855dd8344b1ee25bc75f094cff7648534b432e39cbb5c05668bd62b78f9703d21df754dde13aa339c76cc4fe5bf90b0adaaa2c8a90307c3665d
- SSDEEP 49152:sFX4fkDd3+gKzUIG0f9M134y/Pc4/YaX2BGeO38n9buv:wXsQ+gWxq94uFQamtdq
- TLSH T147F57B83751C12C4DE9A8FB18C814A416E76FDE646A48ECBE14C7421EBB6DF4983CDB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.