General
- Target 2026-11-14_f7b3f45803d9ef5f34d6dd1f9956e7f8_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 9.3MB
- Sample261114-12sh2sd16s
- SHA256 679ccb0bb091fbb75db1055f9356fd75c592f3d5ef307740db269860cdc293d4
- MD5 f7b3f45803d9ef5f34d6dd1f9956e7f8
- SHA1 c0936bb3ecbc784f0d24097265c6c8af8ba2c232
- SHA512 713d476207de56e30422d9a1c9a46bc85400ebeef18a2aeabd91ad4a12774cfc06297c32cbb5f805f3d031df0b4bc0a40a1a31514aee2492205cd66d75175841
- SSDEEP 98304:r+6DVW2fAr4JdNQfcZ3nzlKhTjPY7NOdMlLOYPpHFgxr:rYrZVgbIY3C
- TLSH T1DFA64913F29A03D8E06ED27887765232AA72BC854B34B2DF1B7476251FB5BE05A3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-14_f7b3f45803d9ef5f34d6dd1f9956e7f8_cobalt-strike_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-14_f7b3f45803d9ef5f34d6dd1f9956e7f8_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 9.3MB
- SHA256 679ccb0bb091fbb75db1055f9356fd75c592f3d5ef307740db269860cdc293d4
- MD5 f7b3f45803d9ef5f34d6dd1f9956e7f8
- SHA1 c0936bb3ecbc784f0d24097265c6c8af8ba2c232
- SHA512 713d476207de56e30422d9a1c9a46bc85400ebeef18a2aeabd91ad4a12774cfc06297c32cbb5f805f3d031df0b4bc0a40a1a31514aee2492205cd66d75175841
- SSDEEP 98304:r+6DVW2fAr4JdNQfcZ3nzlKhTjPY7NOdMlLOYPpHFgxr:rYrZVgbIY3C
- TLSH T1DFA64913F29A03D8E06ED27887765232AA72BC854B34B2DF1B7476251FB5BE05A3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects DarkSideRAT
Checks whether UAC is enabled
Suspicious use of SetThreadContext