General
- Target 2026-09-11_7c02d26a98f135e484294f79bc12c9ff_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- Sample260912-keyhsadn3w
- SHA256 2a79db9f7b8d6a1f35171dd185a7cf02299bbb0216fc1f33131f6fc54d93a374
- MD5 7c02d26a98f135e484294f79bc12c9ff
- SHA1 fe4ce95c6745917fa9be5f98d0beee5584cf7f59
- SHA512 4b8a067ad63812ff9178bcd6030eb9a03b60a735f5d42a6e1a339c4588a63ef6e092f96d395612534d2648052fe46a80e9d02642a77b448d8ea33fdecf210ed3
- SSDEEP 98304:l1dFgI2YgNpZwAe8xNpN1F+bmiOORSRpTjYvH:l1sNH+uk+pv
- TLSH T17B867C13F1DA11E8C05ED279876A9232EA71BC494B31B2DF0A9077112E7AFE09B3D754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-11_7c02d26a98f135e484294f79bc12c9ff_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-11_7c02d26a98f135e484294f79bc12c9ff_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 7.9MB
- SHA256 2a79db9f7b8d6a1f35171dd185a7cf02299bbb0216fc1f33131f6fc54d93a374
- MD5 7c02d26a98f135e484294f79bc12c9ff
- SHA1 fe4ce95c6745917fa9be5f98d0beee5584cf7f59
- SHA512 4b8a067ad63812ff9178bcd6030eb9a03b60a735f5d42a6e1a339c4588a63ef6e092f96d395612534d2648052fe46a80e9d02642a77b448d8ea33fdecf210ed3
- SSDEEP 98304:l1dFgI2YgNpZwAe8xNpN1F+bmiOORSRpTjYvH:l1sNH+uk+pv
- TLSH T17B867C13F1DA11E8C05ED279876A9232EA71BC494B31B2DF0A9077112E7AFE09B3D754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1