c2b4bf482c20d4c6f2053ded8cbfcbddb76d993cda863a6d330d73f37d588251

Analysis

max time kernel
149s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 04:26

Target
2026-10-22_937afcc86f30165064c376c0319c2085_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Size 14.2MB
Sample261024-e2k83sw14q
SHA256 c2b4bf482c20d4c6f2053ded8cbfcbddb76d993cda863a6d330d73f37d588251
MD5 937afcc86f30165064c376c0319c2085
SHA1 a6d9d696c734dac6f8dc2649a17bd0fd5b22363b
SHA512 89556ac8e8b8a38dc25bd93820f939e09f3c70c6914530f1838db15082c748e5399b361301a352e819dd1346d8596130475702d60f53331130105d846181dede
SSDEEP 98304:zdwgDw9LygYhuI8zUVVijGivTF4M4VoNbHYIj4CozxdPUc48+7zN4aL7FAL3oB25:zdnw9TUVVijj+TabHRj4/o9aQa
TLSH
T114E67CA5B2B42427FCEAF0386A535543D771FC416320C3C3E42479AA3FB76A15EB5A48
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

upx

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
behavioral1/memory/4272-0-0x00007FF723D50000-0x00007FF724B98000-memory.dmp	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral1/memory/4272-0-0x00007FF723D50000-0x00007FF724B98000-memory.dmp	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/4272-0-0x00007FF723D50000-0x00007FF724B98000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2026-10-22_937afcc86f30165064c376c0319c2085_cobalt-strike_glassworm_icedid_njrat_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_937afcc86f30165064c376c0319c2085_cobalt-strike_glassworm_icedid_njrat_satacom.exe"
1⤵
PID:4272