Analysis
- max time kernel
150s - max time network
129s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/10/2026, 11:08
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-01_7a94e84bad10d12d64ccd5ea9301142b_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_7a94e84bad10d12d64ccd5ea9301142b_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 2026-10-01_7a94e84bad10d12d64ccd5ea9301142b_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
- Size 3.0MB
- Sample261002-m8tsssybpg
- SHA256 eafbfc74c2deda45957c94faa49b8a957a3925c27c38121ea4934a8b9f1350d9
- MD5 7a94e84bad10d12d64ccd5ea9301142b
- SHA1 f243199c8bd57676c1723dbd2a79fdcefcf29dac
- SHA512 5b781d9410b74e1f7b22fdfb63d9a30022a236540c2c4e12b89e6009f0e53122df137fa6db9ebe9740f905a92760a72c7f0191409bd8a2ffff86f0c57960528f
- SSDEEP 49152:Dq98eH6pKYMfeeSkvPCHVJ8qn6+ypvqRwAU7U5WpxJAxCLXezekh/aHnS:G6pKYMFFSHzngEw6
- TLSH T1A7E5AF67A2A500FCD0B7E0B4DE5A6903E632384903316BEF13D499652F376E45A7FB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4124 2026-10-01_7a94e84bad10d12d64ccd5ea9301142b_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4124 2026-10-01_7a94e84bad10d12d64ccd5ea9301142b_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-01_7a94e84bad10d12d64ccd5ea9301142b_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-01_7a94e84bad10d12d64ccd5ea9301142b_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4124