General
- Target 2026-10-13_2610666b919646046dd076311f3f6725_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 6.7MB
- Sample261015-v91azade78
- SHA256 c3f353e875677db99c5f129eb584ec204a16e9c278cc91c44e6cc0539c28c7ae
- MD5 2610666b919646046dd076311f3f6725
- SHA1 769cfd0c97f9912ecf3e364b26432415b175356f
- SHA512 0bc806d2f7c2e3e6ed803ecdad12788aaf91ee572b818e552f153339427a4e5e7ad11e23ccf646846dfca91ea1ee60d8f088e037bd064c5ac069f586f649b86d
- SSDEEP 98304:oAxIxPbQw0YUj/JX3Wm1FL7wRGpj33RV+yhOzCbJ1z0o/57wRGpj3:rxoQD/TvvF9ayozCbJ1z0mNF9
- TLSH T1F966BE03F29A01D8C06ED1B98B5B8222EA61BC450B35B6DF0B5177512E7AFE59F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-13_2610666b919646046dd076311f3f6725_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_2610666b919646046dd076311f3f6725_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 6.7MB
- SHA256 c3f353e875677db99c5f129eb584ec204a16e9c278cc91c44e6cc0539c28c7ae
- MD5 2610666b919646046dd076311f3f6725
- SHA1 769cfd0c97f9912ecf3e364b26432415b175356f
- SHA512 0bc806d2f7c2e3e6ed803ecdad12788aaf91ee572b818e552f153339427a4e5e7ad11e23ccf646846dfca91ea1ee60d8f088e037bd064c5ac069f586f649b86d
- SSDEEP 98304:oAxIxPbQw0YUj/JX3Wm1FL7wRGpj33RV+yhOzCbJ1z0o/57wRGpj3:rxoQD/TvvF9ayozCbJ1z0mNF9
- TLSH T1F966BE03F29A01D8C06ED1B98B5B8222EA61BC450B35B6DF0B5177512E7AFE59F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1