General

  • Target
    2026-11-01_cbdad2de1a8e084e82d5bba2251de6c8_cobalt-strike_glassworm_satacom_vidar_win-beast
  • Size 175KB
  • Sample261102-khmwfsty6q
  • SHA256 1971a5f99334265ff57c67608cee090c3cd290f80b4c97a3d09cf46f35d46720
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-11-01_cbdad2de1a8e084e82d5bba2251de6c8_cobalt-strike_glassworm_satacom_vidar_win-beast
    .exe 175KB

2026-11-01_cbdad2de1a8e084e82d5bba2251de6c8_cobalt-strike_glassworm_satacom_vidar_win-beast

  • IMPHASH cd9db845734f324d33542b325f860538
  • SHA256 1971a5f99334265ff57c67608cee090c3cd290f80b4c97a3d09cf46f35d46720
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
23:c3:f0:24:5d:b0:92:a8:6f:f5:2b:82:af:66:e4:d4:5f:bb:b7:74:cb:80:c8:07:02:cf:f7:ac:03:f4:de:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91110105306401296U,CN=北京奇元科技有限公司,O=北京奇元科技有限公司,ST=北京市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c09e69c9de998b3e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e58c97e4baace5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
0
Major OS version
6
Entry point
84332
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\client_compile\jenkins-ws\shellbox\x64\Release\UpgradePolicyWorker.pdb