General
- Target 2026-10-13_6834658e756ff998c13e4ddbe4f31e9b_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 8.6MB
- Sample261015-n1sffact4w
- SHA256 2aeb2a26eecc6f9c026a7b278460e702fe87677fd893f6a848bcab79d21e5f43
- MD5 6834658e756ff998c13e4ddbe4f31e9b
- SHA1 b60b78a52cfa95cec54acc060b6b5c6f41ab2426
- SHA512 a7eb17e56d8ddf005aaa247117836c7d6199a0ab4bf3aad49685a447d677981d6cabe5f7d69c6a29516e735a5413844f73e04bddfc407407bb02a4d665a35c7d
- SSDEEP 98304:hLGyKYy2yd22UDuZX/fULbfcR+l9EDl3VxA+26O7Zah:hq/Em/fU/c4sDlF2a
- TLSH T115969E43F3A601E8D06ED9748F6D5132AA257C9A47B0A3EF1AD436E11A71ED47B3CB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-13_6834658e756ff998c13e4ddbe4f31e9b_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_6834658e756ff998c13e4ddbe4f31e9b_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 8.6MB
- SHA256 2aeb2a26eecc6f9c026a7b278460e702fe87677fd893f6a848bcab79d21e5f43
- MD5 6834658e756ff998c13e4ddbe4f31e9b
- SHA1 b60b78a52cfa95cec54acc060b6b5c6f41ab2426
- SHA512 a7eb17e56d8ddf005aaa247117836c7d6199a0ab4bf3aad49685a447d677981d6cabe5f7d69c6a29516e735a5413844f73e04bddfc407407bb02a4d665a35c7d
- SSDEEP 98304:hLGyKYy2yd22UDuZX/fULbfcR+l9EDl3VxA+26O7Zah:hq/Em/fU/c4sDlF2a
- TLSH T115969E43F3A601E8D06ED9748F6D5132AA257C9A47B0A3EF1AD436E11A71ED47B3CB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1