General
- Target 2026-10-28_da7f65756d2ec8984d0ce6fd17cb2525_cobalt-strike_glassworm_satacom_vidar
- Size 3.3MB
- Sample261029-ffy4gswx7m
- SHA256 290dfa2acb72fd9faab73d3ebd4206eaa8c9d5805e87af556171b3cf35111e0d
- MD5 da7f65756d2ec8984d0ce6fd17cb2525
- SHA1 8473e0889070141b9488678bb092046bd9b32587
- SHA512 e0aa39b46235877e60e44bc82545f00abddf164bf4bf3d3b0b819e675bf17a675b999fc1d0179e14f82392da3009a9669462dd0d0e690b6f6868ab5d6d1f3866
- SSDEEP 49152:RglY7VBuHYWvVl3MPAwMinIK/1RKc+zLdrVokDLgi6sATcBOOLmY2XmFJ566uBL5:IvTmXRrOLmY2XW6jBYe91
- TLSH T107F5F556625BC0E8CF66C2788556C926E72DFC05032187FB06D07F5A6E366E3FB3A610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-28_da7f65756d2ec8984d0ce6fd17cb2525_cobalt-strike_glassworm_satacom_vidar.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_da7f65756d2ec8984d0ce6fd17cb2525_cobalt-strike_glassworm_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_da7f65756d2ec8984d0ce6fd17cb2525_cobalt-strike_glassworm_satacom_vidar
- Size 3.3MB
- SHA256 290dfa2acb72fd9faab73d3ebd4206eaa8c9d5805e87af556171b3cf35111e0d
- MD5 da7f65756d2ec8984d0ce6fd17cb2525
- SHA1 8473e0889070141b9488678bb092046bd9b32587
- SHA512 e0aa39b46235877e60e44bc82545f00abddf164bf4bf3d3b0b819e675bf17a675b999fc1d0179e14f82392da3009a9669462dd0d0e690b6f6868ab5d6d1f3866
- SSDEEP 49152:RglY7VBuHYWvVl3MPAwMinIK/1RKc+zLdrVokDLgi6sATcBOOLmY2XmFJ566uBL5:IvTmXRrOLmY2XW6jBYe91
- TLSH T107F5F556625BC0E8CF66C2788556C926E72DFC05032187FB06D07F5A6E366E3FB3A610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects DarkSideRAT
Suspicious use of SetThreadContext