82784f298bed670d3d77b9de449c2c486ac12f587d74740f906c592f54ff5688 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

2026-11-06...at.exe

windows10-2004-x64

8

2026-11-06...at.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat
Size 14.8MB
Sample261107-1thzmsgc82
SHA256 82784f298bed670d3d77b9de449c2c486ac12f587d74740f906c592f54ff5688
MD5 d819e28a36a66f8d187d20d1b58d0458
SHA1 d1f1852af05cb64994db9e7dc1affdc58e823ac3
SHA512 e355405f663c8816aa0c9790a90b942925afa8f57d91d2045cf46f51b15149ab271461e4b2f0bd537bf7098e9406ad5923eb2fdb9fd66a4af4e0d9dea0d7d24d
SSDEEP 49152:0WEyQY7v79HbAGqFFx6IC3wEPeCBW1VbUSD5aNtCR22rbzM0949FxHXUAJA1hsZt:049OpIh
TLSH
T122F6EF3163F81789F1F74BBC9A7666018E72FC5B9B21C6DF1298504E0E22AD48975B33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

10 signatures

150 seconds

defense_evasion discovery persistence trojan

Behavioral task

behavioral2

Sample

2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

defense_evasion discovery persistence trojan

Malware Config

Targets

- Target
  2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat
- Size 14.8MB
- SHA256 82784f298bed670d3d77b9de449c2c486ac12f587d74740f906c592f54ff5688
- MD5 d819e28a36a66f8d187d20d1b58d0458
- SHA1 d1f1852af05cb64994db9e7dc1affdc58e823ac3
- SHA512 e355405f663c8816aa0c9790a90b942925afa8f57d91d2045cf46f51b15149ab271461e4b2f0bd537bf7098e9406ad5923eb2fdb9fd66a4af4e0d9dea0d7d24d
- SSDEEP 49152:0WEyQY7v79HbAGqFFx6IC3wEPeCBW1VbUSD5aNtCR22rbzM0949FxHXUAJA1hsZt:049OpIh
- TLSH
  T122F6EF3163F81789F1F74BBC9A7666018E72FC5B9B21C6DF1298504E0E22AD48975B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence trojan
- Downloads MZ/PE file
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistencetrojan

behavioral2

defense_evasiondiscoverypersistencetrojan

© 2018-2026

Terms | Privacy