General
- Target 2026-09-09_3c10543f79e8a215763edd13aa689eba_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.6MB
- Sample260909-1cf4qaar7w
- SHA256 e5e9da28f97bca7a0e26741294033d688f4be09e7fc84be157acd6c0dea1ee7e
- MD5 3c10543f79e8a215763edd13aa689eba
- SHA1 17e91e226e551c13cad134a5fd4289815633c496
- SHA512 f5573cb81bdb1b5d83559a4ae47d3aba4c774fd899f9903c67a2811a1549178abd3a265224217b9387500adab0c55c30c4f7f81f38fd3f9b619134f5d4843eec
- SSDEEP 49152:7Mm5lZkXVxv1eJR1TfMIbQUgu5yl0XTU5UMmdgTIwIur4EJxUdRlteQVRqEwmIEx:aPw2t0T8WTaogcG0jJ
- TLSH T187268D03F19A11D8C02ED5BA8B5B8232EA61BC450B35B6DF0A5077112F76EE5AF3E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_3c10543f79e8a215763edd13aa689eba_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_3c10543f79e8a215763edd13aa689eba_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.6MB
- SHA256 e5e9da28f97bca7a0e26741294033d688f4be09e7fc84be157acd6c0dea1ee7e
- MD5 3c10543f79e8a215763edd13aa689eba
- SHA1 17e91e226e551c13cad134a5fd4289815633c496
- SHA512 f5573cb81bdb1b5d83559a4ae47d3aba4c774fd899f9903c67a2811a1549178abd3a265224217b9387500adab0c55c30c4f7f81f38fd3f9b619134f5d4843eec
- SSDEEP 49152:7Mm5lZkXVxv1eJR1TfMIbQUgu5yl0XTU5UMmdgTIwIur4EJxUdRlteQVRqEwmIEx:aPw2t0T8WTaogcG0jJ
- TLSH T187268D03F19A11D8C02ED5BA8B5B8232EA61BC450B35B6DF0A5077112F76EE5AF3E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1