General

  • Target
    2026-11-01_981768da8162e5740d42b19bc8574385_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
  • Size 553KB
  • Sample261102-rg79bsfc88
  • SHA256 f4252e61c8b4a6a29cf7d1e7264eceb3969e7966950d43e7790c225197b954a9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-11-01_981768da8162e5740d42b19bc8574385_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
    • Size 553KB
    • SHA256 f4252e61c8b4a6a29cf7d1e7264eceb3969e7966950d43e7790c225197b954a9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks