General
- Target 2026-10-02_2d9f7da567bd58268cb607ddd875f132_cobalt-strike_glassworm_icedid_megazord_satacom_vidar
- Size 6.3MB
- Sample261003-snr2cs1flb
- SHA256 03876b3b2fb78950931b058b28828e9e260b0867039e7e324d46a848c4ae47b3
- MD5 2d9f7da567bd58268cb607ddd875f132
- SHA1 c0e8c336148ae76a2ea11865064e2998a5fdeff9
- SHA512 81fa3b28b0ec0be7f5cf959e0c694e8f01b326ca572418a2233353d05598c703e8739babe571292020f0198e5c6fc236174c032b43ba696ea4385d53c92dbb7e
- SSDEEP 49152:a5MyZyWWkfCUzOgVSvFs/yg2ClwtVvgRDPI0u/lXE4Rp6lntiZzS+P+POgQWnr4m:ThK6AwfVlE4qNm+Gyou/0+Ht
- TLSH T1F16607207BAA59ADC19AC47083464A725E3130DB0B39B9FF44C592793F79AF51F3C268
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_2d9f7da567bd58268cb607ddd875f132_cobalt-strike_glassworm_icedid_megazord_satacom_vidar.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_2d9f7da567bd58268cb607ddd875f132_cobalt-strike_glassworm_icedid_megazord_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_2d9f7da567bd58268cb607ddd875f132_cobalt-strike_glassworm_icedid_megazord_satacom_vidar
- Size 6.3MB
- SHA256 03876b3b2fb78950931b058b28828e9e260b0867039e7e324d46a848c4ae47b3
- MD5 2d9f7da567bd58268cb607ddd875f132
- SHA1 c0e8c336148ae76a2ea11865064e2998a5fdeff9
- SHA512 81fa3b28b0ec0be7f5cf959e0c694e8f01b326ca572418a2233353d05598c703e8739babe571292020f0198e5c6fc236174c032b43ba696ea4385d53c92dbb7e
- SSDEEP 49152:a5MyZyWWkfCUzOgVSvFs/yg2ClwtVvgRDPI0u/lXE4Rp6lntiZzS+P+POgQWnr4m:ThK6AwfVlE4qNm+Gyou/0+Ht
- TLSH T1F16607207BAA59ADC19AC47083464A725E3130DB0B39B9FF44C592793F79AF51F3C268
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext