General
- Target 2026-10-02_16e60acea2f8d0e1c71236f5e608dfd5_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 5.7MB
- Sample261003-vae6ratv5n
- SHA256 1b7b0dd13d01db737e81004f609239219481c6e7047523a01829a4768c94dd25
- MD5 16e60acea2f8d0e1c71236f5e608dfd5
- SHA1 b6f756be2322a215f9cb73ab181a6c0f563fc0f6
- SHA512 72a16d92804ab6f981385137d8a75fa9f7e1b73c2560a245aeaefdb693384c94463d4fb5e466b58421768e5313dcc45f85baa35e84881d112524d048f7c64fea
- SSDEEP 49152:ZVD09kZV+VJ3L4gd6kP2MeG9HsOea/lkVoWAF711kp30pegRKQDr+66R1GcSgS2l:oRdoqPTKAnQKyR1nF64HX
- TLSH T1FD566B03F2EA42D8E0BED6B58B265232E976BC454B34A2DF065036151E75FE09F3D722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_16e60acea2f8d0e1c71236f5e608dfd5_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_16e60acea2f8d0e1c71236f5e608dfd5_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 5.7MB
- SHA256 1b7b0dd13d01db737e81004f609239219481c6e7047523a01829a4768c94dd25
- MD5 16e60acea2f8d0e1c71236f5e608dfd5
- SHA1 b6f756be2322a215f9cb73ab181a6c0f563fc0f6
- SHA512 72a16d92804ab6f981385137d8a75fa9f7e1b73c2560a245aeaefdb693384c94463d4fb5e466b58421768e5313dcc45f85baa35e84881d112524d048f7c64fea
- SSDEEP 49152:ZVD09kZV+VJ3L4gd6kP2MeG9HsOea/lkVoWAF711kp30pegRKQDr+66R1GcSgS2l:oRdoqPTKAnQKyR1nF64HX
- TLSH T1FD566B03F2EA42D8E0BED6B58B265232E976BC454B34A2DF065036151E75FE09F3D722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext