General
- Target 2026-09-12_d1645dad3e54da6ae3764299a6d662e9_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 8.1MB
- Sample260912-vmtvnscl61
- SHA256 bfc193aef45ee4bd9dd34590bee097feecc901c80ab5f9b9ff9a01bca67eb1d1
- MD5 d1645dad3e54da6ae3764299a6d662e9
- SHA1 229419653eb0df1d85b01a88a84f3d4ae705257e
- SHA512 8d24cb4b22bdc600452743d10df7f04262496d40ae5e870349e5cb850046c61b2472c1f77c46d348c781cd245433ae8edc8db9941dadac99609054ae953cf478
- SSDEEP 98304:RAEuZmsTTyJwN5uekNfCmUC+rHYJhYtH:R2JOJwTuprqrHkh
- TLSH T18F868D13F2A501E8D05ED974CF3A52329B357C4A8BB0A2EF169436E11A75ED47B3CB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_d1645dad3e54da6ae3764299a6d662e9_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260911-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_d1645dad3e54da6ae3764299a6d662e9_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 8.1MB
- SHA256 bfc193aef45ee4bd9dd34590bee097feecc901c80ab5f9b9ff9a01bca67eb1d1
- MD5 d1645dad3e54da6ae3764299a6d662e9
- SHA1 229419653eb0df1d85b01a88a84f3d4ae705257e
- SHA512 8d24cb4b22bdc600452743d10df7f04262496d40ae5e870349e5cb850046c61b2472c1f77c46d348c781cd245433ae8edc8db9941dadac99609054ae953cf478
- SSDEEP 98304:RAEuZmsTTyJwN5uekNfCmUC+rHYJhYtH:R2JOJwTuprqrHkh
- TLSH T18F868D13F2A501E8D05ED974CF3A52329B357C4A8BB0A2EF169436E11A75ED47B3CB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1