General
- Target 2026-08-29_fa56236cbda3f8dafc307468e02b6a7a_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.6MB
- Sample260830-22746stxcy
- SHA256 d40462f71ac37a391d150933a1a3ed84d95caae8944c4dd7b762b1a3deeb2c2d
- MD5 fa56236cbda3f8dafc307468e02b6a7a
- SHA1 a0a2b86793347bd4e91bbe1d112f5210e76d0319
- SHA512 f3100d0ec25d31b01725a232d4bd0165e6e8a261ea3243f663ddb5ced44cb5914412c14f2038caf40a27f66e7420cb38af8e26f332c8c24b63da5f55a02b08df
- SSDEEP 49152:5MJ5lZkXVxv1eJR1TfMIbQUgG5yl0XTU5UMmdgTIwIur4EJxUdRlteQVRqEwmIEI:hPw2t8T8WTaogmsaw5vt
- TLSH T1DF268D03F19A11D8C02ED5BA8B5B8222EA61BC450B35B6DF0A5177112F76FE4AF3E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-29_fa56236cbda3f8dafc307468e02b6a7a_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-29_fa56236cbda3f8dafc307468e02b6a7a_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.6MB
- SHA256 d40462f71ac37a391d150933a1a3ed84d95caae8944c4dd7b762b1a3deeb2c2d
- MD5 fa56236cbda3f8dafc307468e02b6a7a
- SHA1 a0a2b86793347bd4e91bbe1d112f5210e76d0319
- SHA512 f3100d0ec25d31b01725a232d4bd0165e6e8a261ea3243f663ddb5ced44cb5914412c14f2038caf40a27f66e7420cb38af8e26f332c8c24b63da5f55a02b08df
- SSDEEP 49152:5MJ5lZkXVxv1eJR1TfMIbQUgG5yl0XTU5UMmdgTIwIur4EJxUdRlteQVRqEwmIEI:hPw2t8T8WTaogmsaw5vt
- TLSH T1DF268D03F19A11D8C02ED5BA8B5B8222EA61BC450B35B6DF0A5177112F76FE4AF3E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory