49b44822de4c96fb724007f33285b9d264d600deb7f9031429a52abea634c568 | Triage™

Login
Reports

Overview

overview

Static

static

2026-09-09...ar.exe

windows10-2004-x64

8

2026-09-09...ar.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-09_9b4bae1985e3b993b58bff3ea3ced07f_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
Size 19.1MB
Sample260909-sgfdzsysgw
SHA256 49b44822de4c96fb724007f33285b9d264d600deb7f9031429a52abea634c568
MD5 9b4bae1985e3b993b58bff3ea3ced07f
SHA1 c8d542558cd689ec760766347acc43414ebe69f9
SHA512 c6699e5a51113de5f2922b2a608142ce4b1ed997e84f87bb019c7b40c282d8a3ee98923fc79b592fa48e770497e4f50f65e6a610c8a227189139dc6e9a6041e8
SSDEEP 24576:8VR2R/8Rb/3XuVyQRr6fNkiew5l4GiM+O93l0fZqbK0u:42evSyyORewl+O93+x9
TLSH
T1F817AD57A3A410F9D1A7C179C9438A13F7B2B85613209BDF13A4897A1F236E16F3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion execution

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

2026-09-09_9b4bae1985e3b993b58bff3ea3ced07f_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

defense_evasion execution

Behavioral task

behavioral2

Sample

2026-09-09_9b4bae1985e3b993b58bff3ea3ced07f_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

8 signatures

150 seconds

defense_evasion execution

Malware Config

Targets

- Target
  2026-09-09_9b4bae1985e3b993b58bff3ea3ced07f_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 19.1MB
- SHA256 49b44822de4c96fb724007f33285b9d264d600deb7f9031429a52abea634c568
- MD5 9b4bae1985e3b993b58bff3ea3ced07f
- SHA1 c8d542558cd689ec760766347acc43414ebe69f9
- SHA512 c6699e5a51113de5f2922b2a608142ce4b1ed997e84f87bb019c7b40c282d8a3ee98923fc79b592fa48e770497e4f50f65e6a610c8a227189139dc6e9a6041e8
- SSDEEP 24576:8VR2R/8Rb/3XuVyQRr6fNkiew5l4GiM+O93l0fZqbK0u:42evSyyORewl+O93+x9
- TLSH
  T1F817AD57A3A410F9D1A7C179C9438A13F7B2B85613209BDF13A4897A1F236E16F3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Stops running service(s)
  defense_evasion execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Windows Command Shell

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

defense_evasionexecution

behavioral2

defense_evasionexecution

© 2018-2026

Terms | Privacy