General
- Target 2026-08-20_d0fb8b52ae511c5783d8b4866cc2dc10_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.2MB
- Sample260820-rs7ryayfkc
- SHA256 abe9c57a0cb02f4396fc33559f0d281251a5a38f7a8f9549512225e11b1529df
- MD5 d0fb8b52ae511c5783d8b4866cc2dc10
- SHA1 b6e385a629db2d8ad516466b3d655662ab60b05a
- SHA512 56080b653816b6720f615614e641c61bf6e79f59da39ec4882838455d390abe245a1808611b2b910efea53bdd1209ad4c3c95f0ef0ec3561b787ed52a6f1d747
- SSDEEP 49152:0A9d+y3FeqamBiUhq11NqNCHAEGnQayBpaplDDSni6lNtVF2xxPWS5PlzQ/lFTjG:aoJCU+8vERSDqQZCLm
- TLSH T19D269D13F1DA11D8C059D1B98B4A9633AA72BC494B35B2DF0B9077122B7AEE09F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_d0fb8b52ae511c5783d8b4866cc2dc10_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_d0fb8b52ae511c5783d8b4866cc2dc10_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.2MB
- SHA256 abe9c57a0cb02f4396fc33559f0d281251a5a38f7a8f9549512225e11b1529df
- MD5 d0fb8b52ae511c5783d8b4866cc2dc10
- SHA1 b6e385a629db2d8ad516466b3d655662ab60b05a
- SHA512 56080b653816b6720f615614e641c61bf6e79f59da39ec4882838455d390abe245a1808611b2b910efea53bdd1209ad4c3c95f0ef0ec3561b787ed52a6f1d747
- SSDEEP 49152:0A9d+y3FeqamBiUhq11NqNCHAEGnQayBpaplDDSni6lNtVF2xxPWS5PlzQ/lFTjG:aoJCU+8vERSDqQZCLm
- TLSH T19D269D13F1DA11D8C059D1B98B4A9633AA72BC494B35B2DF0B9077122B7AEE09F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory