General
- Target 2026-08-31_f62549f3845a6fa1d83b795d6f8acd2b_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 1.7MB
- Sample260901-3a44wayhpb
- SHA256 db8a70dffd95dbb731316e214f1c229fbcea07262cc8b4989cbf99ec2403dfb7
- MD5 f62549f3845a6fa1d83b795d6f8acd2b
- SHA1 680645ee70eb58ea0383188fd8bbc1e49a343652
- SHA512 924b9716c4691edae3058cb6578cbc89598bcdc6adeea198a8e13df91f5eb4e6cb6720db613561680ddcf5d452ccc51529301f41501d6a42f5c22e9065140cd5
- SSDEEP 24576:lRaS4hzPsh1axXDQeR74F66JhIjBecPBmfkFSZLOs71nuq41tgInL:x6vlSnu3WCL
- TLSH T15985E647EBB651E4D8FAC1398666722BBC71385983349BD797408A474B62FF0E93E340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-31_f62549f3845a6fa1d83b795d6f8acd2b_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-31_f62549f3845a6fa1d83b795d6f8acd2b_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_f62549f3845a6fa1d83b795d6f8acd2b_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
- Size 1.7MB
- SHA256 db8a70dffd95dbb731316e214f1c229fbcea07262cc8b4989cbf99ec2403dfb7
- MD5 f62549f3845a6fa1d83b795d6f8acd2b
- SHA1 680645ee70eb58ea0383188fd8bbc1e49a343652
- SHA512 924b9716c4691edae3058cb6578cbc89598bcdc6adeea198a8e13df91f5eb4e6cb6720db613561680ddcf5d452ccc51529301f41501d6a42f5c22e9065140cd5
- SSDEEP 24576:lRaS4hzPsh1axXDQeR74F66JhIjBecPBmfkFSZLOs71nuq41tgInL:x6vlSnu3WCL
- TLSH T15985E647EBB651E4D8FAC1398666722BBC71385983349BD797408A474B62FF0E93E340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Accesses cryptocurrency files/wallets, possible credential harvesting