General
- Target 2026-10-31_9fe6bdf911024b9586b174ed827773a9_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 2.0MB
- Sample261031-ppm71sw1ht
- SHA256 0b989fd02e6133c654eb33d0f34a57e13661a8eecdadabf068b8affcfc4452a6
- MD5 9fe6bdf911024b9586b174ed827773a9
- SHA1 5bee0bcd50e13588c103753825d61069e769bd0b
- SHA512 f1deaddfda1e347655c82eaee10584cd3f84f5276adc5c75c69579b03b2b3fe9013689cb7d8da9c16c6b15228f43202422dc3eaa24f437d7c44b9538b079af38
- SSDEEP 24576:wTWJIJuiuntlrN+q6kylxfvmspFMRw3k7OPMnGu2/I86FXFo1AjEyHwdif5Tr9Xh:wTcIJhunddyj8RpaUnN2b0oydpPoyd
- TLSH T1E6A5AE17E29610EDC06EC274C6565212FE71BC850734BADF17A4AB252E22FD06F3EB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-31_9fe6bdf911024b9586b174ed827773a9_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-31_9fe6bdf911024b9586b174ed827773a9_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
metasploit_stager
C2
-
10.0.2.15:4444
Targets
-
- Target 2026-10-31_9fe6bdf911024b9586b174ed827773a9_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 2.0MB
- SHA256 0b989fd02e6133c654eb33d0f34a57e13661a8eecdadabf068b8affcfc4452a6
- MD5 9fe6bdf911024b9586b174ed827773a9
- SHA1 5bee0bcd50e13588c103753825d61069e769bd0b
- SHA512 f1deaddfda1e347655c82eaee10584cd3f84f5276adc5c75c69579b03b2b3fe9013689cb7d8da9c16c6b15228f43202422dc3eaa24f437d7c44b9538b079af38
- SSDEEP 24576:wTWJIJuiuntlrN+q6kylxfvmspFMRw3k7OPMnGu2/I86FXFo1AjEyHwdif5Tr9Xh:wTcIJhunddyj8RpaUnN2b0oydpPoyd
- TLSH T1E6A5AE17E29610EDC06EC274C6565212FE71BC850734BADF17A4AB252E22FD06F3EB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.