Extracted

• • Target
    2026-08-23_0f32283f1ac1a70f2bd7b2603380dc43_cobalt-strike_glassworm_megazord_satacom_vidar
  • Size 102.4MB
  • SHA256 8713aec8ab678f8e3cf3371e7802220f3a3b36b3163d65aa6a9822689be0139e
  • MD5 0f32283f1ac1a70f2bd7b2603380dc43
  • SHA1 dfa29986a82e018a7ca96fef5be104edb5f39207
  • SHA512 e264ce55fc230c68f48218922496078fb37bb901c3d3a7265c8537f2443cb3ec5271d7266cf30f598d38fcb11a2b02612f65b9fec51b59ba73edf1a161bb0a30
  • SSDEEP 49152:E+5cr7G2c2lXjxwesAmFF3/Ei8H25DSeAi:7Lv1j1DvAi
  • TLSH
    T1FF389D15B28B0D97FC568530C5C9B6F2A2FC6C1732F1628FCF158E561E226BD4EAA131
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  collectiondiscoveryexecutioneternitypersistenceprivilege_escalation

  • Family: Eternity

    Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    eternity
  • Custom signature

    Detects executables referencing Windows vault credential objects. Observed in infostealers

  • Accesses Microsoft Outlook profiles

    collection

  • Contacts third-party web service commonly abused for C2

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

    discovery
  behavioral1behavioral2