General
- Target 2026-11-02_be1ca72267c20ee620e359d6dd272990_cobalt-strike_glassworm_icedid_satacom
- Size 40.6MB
- Sample261102-3115xage87
- SHA256 5db1bfeb4a0e698df944973650cc1cf9d4257b8ecbb8c4cacc66879d4df67009
- MD5 be1ca72267c20ee620e359d6dd272990
- SHA1 67302875e0ec247195b32071d0be9f4f13b833d4
- SHA512 bae4a6b98441b3404734c643ef2f56ce5589e91530f9f8e9a016dc5df80a2bc930d7873093b750abdae717e5975b618ab8c34dece25d46c6f68607b24908d5eb
- SSDEEP 393216:xz0PBwOiQQqVDut46tDiA9ZvIRpjRl/bvx:xoXQqgtErRljv
- TLSH T128971811BB5A686DD15AC8B0830A4A335A3434DB1B36B9FF44D492393FBDAF45B38319
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-11-02_be1ca72267c20ee620e359d6dd272990_cobalt-strike_glassworm_icedid_satacom.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_be1ca72267c20ee620e359d6dd272990_cobalt-strike_glassworm_icedid_satacom
- Size 40.6MB
- SHA256 5db1bfeb4a0e698df944973650cc1cf9d4257b8ecbb8c4cacc66879d4df67009
- MD5 be1ca72267c20ee620e359d6dd272990
- SHA1 67302875e0ec247195b32071d0be9f4f13b833d4
- SHA512 bae4a6b98441b3404734c643ef2f56ce5589e91530f9f8e9a016dc5df80a2bc930d7873093b750abdae717e5975b618ab8c34dece25d46c6f68607b24908d5eb
- SSDEEP 393216:xz0PBwOiQQqVDut46tDiA9ZvIRpjRl/bvx:xoXQqgtErRljv
- TLSH T128971811BB5A686DD15AC8B0830A4A335A3434DB1B36B9FF44D492393FBDAF45B38319
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.