General
- Target 2026-10-10_0e29565dfe4c1f802706ab5e79666c4a_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 2.0MB
- Sample261011-1af1yahb85
- SHA256 e589ff37eb603903bcd9cbe565b4c73d83ec872bae976b698acf4e18a9d9551f
- MD5 0e29565dfe4c1f802706ab5e79666c4a
- SHA1 70a3e675c82a49d64572a013781ea2a2bdfca2c7
- SHA512 a22021b3fe27f96e6605ebc677085ed2f1330e5360772345a828764e141afd91c3e1e92aaca72d58eaff70c87401714d4a31d79560514dc41542cf7f50caab2a
- SSDEEP 49152:CjMdjiaC6w9MGs18ZVcvZGpOzxoYP78docIC1pdv0Ho9dXtk:DdnaIvZGpOKYP78fIIdv0Kddk
- TLSH T13FA58D17A3B900EDD1A7C279CA565603EB72B4050734ABDF13908A672F23AE15F7E724
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-10-10_0e29565dfe4c1f802706ab5e79666c4a_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_0e29565dfe4c1f802706ab5e79666c4a_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 2.0MB
- SHA256 e589ff37eb603903bcd9cbe565b4c73d83ec872bae976b698acf4e18a9d9551f
- MD5 0e29565dfe4c1f802706ab5e79666c4a
- SHA1 70a3e675c82a49d64572a013781ea2a2bdfca2c7
- SHA512 a22021b3fe27f96e6605ebc677085ed2f1330e5360772345a828764e141afd91c3e1e92aaca72d58eaff70c87401714d4a31d79560514dc41542cf7f50caab2a
- SSDEEP 49152:CjMdjiaC6w9MGs18ZVcvZGpOzxoYP78docIC1pdv0Ho9dXtk:DdnaIvZGpOKYP78fIIdv0Kddk
- TLSH T13FA58D17A3B900EDD1A7C279CA565603EB72B4050734ABDF13908A672F23AE15F7E724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.