General

  • Target
    2026-10-28_67df74d5123b31e24269a177aefc1ed8_cobalt-strike_glassworm_satacom_vidar_win-beast
  • Size 175KB
  • Sample261030-de79navxcy
  • SHA256 e1046d3d82ee85fd6c19cc9f8d53414f1987678b2ae708360403f10040be992b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-10-28_67df74d5123b31e24269a177aefc1ed8_cobalt-strike_glassworm_satacom_vidar_win-beast
    .exe 175KB

2026-10-28_67df74d5123b31e24269a177aefc1ed8_cobalt-strike_glassworm_satacom_vidar_win-beast

  • IMPHASH cd9db845734f324d33542b325f860538
  • SHA256 e1046d3d82ee85fd6c19cc9f8d53414f1987678b2ae708360403f10040be992b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a9:76:88:d0:e2:80:40:84:42:6e:46:c7:4f:3d:d1:b6:ff:67:60:90:b0:5d:d3:91:56:83:2b:5c:9f:3d:8e:a5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91110105306401296U,CN=北京奇元科技有限公司,O=北京奇元科技有限公司,ST=北京市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c09e69c9de998b3e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e58c97e4baace5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
0
Major OS version
6
Entry point
84332
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\client_compile\jenkins-ws\shellbox\x64\Release\UpgradePolicyWorker.pdb