General
- Target 2026-09-20_82a4817a8571b9f6b08ca7bd66c76ba2_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 8.2MB
- Sample260920-xmcbqs1blh
- SHA256 7e73f31e848cc47fd5efb6c46e87107ac5d13690380a9b1eca7f2aa923f2bd5b
- MD5 82a4817a8571b9f6b08ca7bd66c76ba2
- SHA1 f7c03383e276b419a5e0d99f10d18b37f3b045e3
- SHA512 fcb1bf093892fb2ec762a015c49969e8ce04fc175a957f19b0215583db02c3f053bba9c034e2210351d54c786d072ba94f236246859160cf27d9212b4803d736
- SSDEEP 196608:dF7Pm1MGfoZQnx5YdyR9RndK7MQVQBWG:GCGfoZQnx5YdjEB
- TLSH T1E5868D13F3A501E8D05ED974CF3A56329A357C4A8BB0A2EF169436E11A75ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-20_82a4817a8571b9f6b08ca7bd66c76ba2_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260911-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-20_82a4817a8571b9f6b08ca7bd66c76ba2_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 8.2MB
- SHA256 7e73f31e848cc47fd5efb6c46e87107ac5d13690380a9b1eca7f2aa923f2bd5b
- MD5 82a4817a8571b9f6b08ca7bd66c76ba2
- SHA1 f7c03383e276b419a5e0d99f10d18b37f3b045e3
- SHA512 fcb1bf093892fb2ec762a015c49969e8ce04fc175a957f19b0215583db02c3f053bba9c034e2210351d54c786d072ba94f236246859160cf27d9212b4803d736
- SSDEEP 196608:dF7Pm1MGfoZQnx5YdyR9RndK7MQVQBWG:GCGfoZQnx5YdjEB
- TLSH T1E5868D13F3A501E8D05ED974CF3A56329A357C4A8BB0A2EF169436E11A75ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1