General
- Target 2026-08-21_92c079e5008c953cd80fcd15eeae46bf_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 8.3MB
- Sample260822-mfm5jsxxex
- SHA256 7c01ad2063f0f77f3e4397c3054f6695e79c0419f1a5d473ac84d38a2319216c
- MD5 92c079e5008c953cd80fcd15eeae46bf
- SHA1 5d781e277c47c226a0fe1052b85813b550985b80
- SHA512 6c312f263f9e3cf009702abb761001c77d6b7aecbf619e84ad35f26e62a316953d68ae7970c7db3ea24f20dd0aacc411a7cafcceee81548d1c4cf63578fd3702
- SSDEEP 98304:8fyPB3zmfBgiwINXE9ynI81WT7cG8BAZFYNY8AFl:uyPB3zmfBgDuEXFl
- TLSH T157967C53F2A601E8D06FCA748B7A523299757C464B31A3EF0A943A251E75FD46F3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-21_92c079e5008c953cd80fcd15eeae46bf_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_92c079e5008c953cd80fcd15eeae46bf_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 8.3MB
- SHA256 7c01ad2063f0f77f3e4397c3054f6695e79c0419f1a5d473ac84d38a2319216c
- MD5 92c079e5008c953cd80fcd15eeae46bf
- SHA1 5d781e277c47c226a0fe1052b85813b550985b80
- SHA512 6c312f263f9e3cf009702abb761001c77d6b7aecbf619e84ad35f26e62a316953d68ae7970c7db3ea24f20dd0aacc411a7cafcceee81548d1c4cf63578fd3702
- SSDEEP 98304:8fyPB3zmfBgiwINXE9ynI81WT7cG8BAZFYNY8AFl:uyPB3zmfBgDuEXFl
- TLSH T157967C53F2A601E8D06FCA748B7A523299757C464B31A3EF0A943A251E75FD46F3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Downloads MZ/PE file
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1