General
- Target 2026-08-21_1216b140ab13b7f8cd18bf85940479b3_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 1.7MB
- Sample260821-za4assdc46
- SHA256 48e0d98c3a9ee54a8fa3810dc3be8d281c55654209266b64cc6ad12e155a89ba
- MD5 1216b140ab13b7f8cd18bf85940479b3
- SHA1 c0975e94670b7f1de7acb7b016cff4fb2647c4c8
- SHA512 807ea3b95a99a669c12da1e0184240cda9d9e18058e1f819da8e61b73bd392ef0a9cac8b50f56c028245688d1aac72b49d83b7df5e0497db11a0ce2c9d3ed7d6
- SSDEEP 24576:DRw0lRRzPOh8VpDQeR74F66JhurNByKyhwe/LZ3pTsxpHioOkjEe/MsGK:qSbIspCRav0
- TLSH T15C85E647EBB651E4D8FAC1398666722BBC71385983349BD797408A474B62FF0E93E340
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-21_1216b140ab13b7f8cd18bf85940479b3_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_1216b140ab13b7f8cd18bf85940479b3_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_1216b140ab13b7f8cd18bf85940479b3_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 1.7MB
- SHA256 48e0d98c3a9ee54a8fa3810dc3be8d281c55654209266b64cc6ad12e155a89ba
- MD5 1216b140ab13b7f8cd18bf85940479b3
- SHA1 c0975e94670b7f1de7acb7b016cff4fb2647c4c8
- SHA512 807ea3b95a99a669c12da1e0184240cda9d9e18058e1f819da8e61b73bd392ef0a9cac8b50f56c028245688d1aac72b49d83b7df5e0497db11a0ce2c9d3ed7d6
- SSDEEP 24576:DRw0lRRzPOh8VpDQeR74F66JhurNByKyhwe/LZ3pTsxpHioOkjEe/MsGK:qSbIspCRav0
- TLSH T15C85E647EBB651E4D8FAC1398666722BBC71385983349BD797408A474B62FF0E93E340
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting