General

  • Target
    2026-11-12_414c886c3d6cec0d9d3ccea645362a99_cobalt-strike_glassworm_icedid_quasar-rat_satacom
  • Size 60.6MB
  • Sample261113-e6k4wazx4q
  • SHA256 71e4d784950e01efb3a64dea5d6c07bc662fb7620258ef158ea88e9f2caa2d62
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-11-12_414c886c3d6cec0d9d3ccea645362a99_cobalt-strike_glassworm_icedid_quasar-rat_satacom
    • Size 60.6MB
    • SHA256 71e4d784950e01efb3a64dea5d6c07bc662fb7620258ef158ea88e9f2caa2d62
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Deletes itself

    • Executes dropped EXE

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

MITRE ATT&CK Enterprise v16

Tasks