General
- Target 2026-09-10_d6ce5cd4dd7b9ed7fea4b8101eda04aa_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 5.4MB
- Sample260910-l3xrtsvtat
- SHA256 5c81de66373f916ceebe95a3c7ae27fe2aef2d114ab94fd7ea1d0d3541070d6e
- MD5 d6ce5cd4dd7b9ed7fea4b8101eda04aa
- SHA1 3115ab0f4bf3c8418303d08883a66255c170c693
- SHA512 9493940cfc40a27c76190b6ed90a4e483d85d63f958cf2130a0f3b39f0b9a31dfd170e2dd1395213b14e05c8ad82a04896dea3ff0e5f8835b889117ce3af0c89
- SSDEEP 49152:QAk8jwDnppSLMdONc940YTCVOyjBzj24XX4JzbPSYQ96zDDSsLV5UZOES+JkXaEJ:hGSVQ40YEr+fhVd2TLm+G0jJVLm
- TLSH T1EF46BE13F5DA11D8C059D1B98B4A9233BA71BC494B21B2DF0B9077122A7AFE49F3E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_d6ce5cd4dd7b9ed7fea4b8101eda04aa_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_d6ce5cd4dd7b9ed7fea4b8101eda04aa_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 5.4MB
- SHA256 5c81de66373f916ceebe95a3c7ae27fe2aef2d114ab94fd7ea1d0d3541070d6e
- MD5 d6ce5cd4dd7b9ed7fea4b8101eda04aa
- SHA1 3115ab0f4bf3c8418303d08883a66255c170c693
- SHA512 9493940cfc40a27c76190b6ed90a4e483d85d63f958cf2130a0f3b39f0b9a31dfd170e2dd1395213b14e05c8ad82a04896dea3ff0e5f8835b889117ce3af0c89
- SSDEEP 49152:QAk8jwDnppSLMdONc940YTCVOyjBzj24XX4JzbPSYQ96zDDSsLV5UZOES+JkXaEJ:hGSVQ40YEr+fhVd2TLm+G0jJVLm
- TLSH T1EF46BE13F5DA11D8C059D1B98B4A9233BA71BC494B21B2DF0B9077122A7AFE49F3E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1