General
- Target 2026-11-01_a0e930fa22d9510169f72a046fd564a3_amadey_cobalt-strike_glassworm_icedid_manuscrypt_njrat_rhadamanthys_satacom_stop_vidar
- Size 10.4MB
- Sample261102-qfpj6afb89
- SHA256 abab2e9c742db407ce1a82f372dd4ec7375fb0851482b6e43a1c7383c4d86c45
- MD5 a0e930fa22d9510169f72a046fd564a3
- SHA1 a0473765d946baef062efb64ebc5e9536725834d
- SHA512 adfc7109cdf8bfbd054add40a1e4c56e3a7e2bfa3a08f67f9e2d32db87cf9226ea0ae01a403770476059a296f4e2147f8f34dc566d52958d0077c0ee9a6fea0f
- SSDEEP 196608:GpbFZ319wQVb9Pj8K/Y8KG8c2t3vLCf8q+sEnz:GF79hg8KGR29v2Ksg
- TLSH T19FB68EFB34D2A5AEC416C1BA4612FD3FDA5FF43A061798A35055E236BE62C09B914F0C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-01_a0e930fa22d9510169f72a046fd564a3_amadey_cobalt-strike_glassworm_icedid_manuscrypt_njrat_r.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_a0e930fa22d9510169f72a046fd564a3_amadey_cobalt-strike_glassworm_icedid_manuscrypt_njrat_r.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_a0e930fa22d9510169f72a046fd564a3_amadey_cobalt-strike_glassworm_icedid_manuscrypt_njrat_rhadamanthys_satacom_stop_vidar
- Size 10.4MB
- SHA256 abab2e9c742db407ce1a82f372dd4ec7375fb0851482b6e43a1c7383c4d86c45
- MD5 a0e930fa22d9510169f72a046fd564a3
- SHA1 a0473765d946baef062efb64ebc5e9536725834d
- SHA512 adfc7109cdf8bfbd054add40a1e4c56e3a7e2bfa3a08f67f9e2d32db87cf9226ea0ae01a403770476059a296f4e2147f8f34dc566d52958d0077c0ee9a6fea0f
- SSDEEP 196608:GpbFZ319wQVb9Pj8K/Y8KG8c2t3vLCf8q+sEnz:GF79hg8KGR29v2Ksg
- TLSH T19FB68EFB34D2A5AEC416C1BA4612FD3FDA5FF43A061798A35055E236BE62C09B914F0C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Themida