450ab6e124686ed56320a9de025416e87e34a134cf488938327186ab94929e5e | Triage™

Login
Reports

Overview

overview

Static

static

2026-09-09...ar.exe

windows10-2004-x64

8

2026-09-09...ar.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-09_fb09a7c3031d2935a185130abfd4e306_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
Size 19.1MB
Sample260909-kv97hsvvcs
SHA256 450ab6e124686ed56320a9de025416e87e34a134cf488938327186ab94929e5e
MD5 fb09a7c3031d2935a185130abfd4e306
SHA1 89ce081163a8a01ccc38a69ccd1c2c80e8a56c05
SHA512 b3caaf79d3a5b8cdb101553cd1260e3efa8c9da0bc9f16c343ae1e734ecc1ee83550f67314ee3bca383cae6baa383248b37c6977009386e926c549de7b094ebb
SSDEEP 24576:p3drZJjxC+5YpiEougqMiEG5d4Giy+O93l0fZwu:7rZHT5E7jpEGj+O93+xz
TLSH
T1C717AE57A3A410F9D1A7C178C5528A13F7B2B85613209BDF13A4897A1F23BE16F3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion execution

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

2026-09-09_fb09a7c3031d2935a185130abfd4e306_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

defense_evasion execution

Behavioral task

behavioral2

Sample

2026-09-09_fb09a7c3031d2935a185130abfd4e306_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

8 signatures

150 seconds

defense_evasion execution

Malware Config

Targets

- Target
  2026-09-09_fb09a7c3031d2935a185130abfd4e306_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 19.1MB
- SHA256 450ab6e124686ed56320a9de025416e87e34a134cf488938327186ab94929e5e
- MD5 fb09a7c3031d2935a185130abfd4e306
- SHA1 89ce081163a8a01ccc38a69ccd1c2c80e8a56c05
- SHA512 b3caaf79d3a5b8cdb101553cd1260e3efa8c9da0bc9f16c343ae1e734ecc1ee83550f67314ee3bca383cae6baa383248b37c6977009386e926c549de7b094ebb
- SSDEEP 24576:p3drZJjxC+5YpiEougqMiEG5d4Giy+O93l0fZwu:7rZHT5E7jpEGj+O93+xz
- TLSH
  T1C717AE57A3A410F9D1A7C178C5528A13F7B2B85613209BDF13A4897A1F23BE16F3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Stops running service(s)
  defense_evasion execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Windows Command Shell

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

defense_evasionexecution

behavioral2

defense_evasionexecution

© 2018-2026

Terms | Privacy