General
- Target 2026-04-15_7f62e9b719d12c2e68b7daf3c6f867c6_amadey_cobalt-strike_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_vidar
- Size 4.4MB
- Sample260415-3sdpmsb15l
- SHA256 e85d1c3fb44af90fc6f00a408ef291139e7bfb4e085328781f11b97832e2fd1e
- MD5 7f62e9b719d12c2e68b7daf3c6f867c6
- SHA1 4e7fb10ee79328f16ec0b6c9072ef233acb85562
- SHA512 794696ebbce4d43ffef449860f5cd9e37c17051eb6b8d1262221bfcebf72f224f9e1c9648057399b9f60e6c2c579739a4fe59c333ebbb2c84e230b1076af736a
- SSDEEP 49152:g0op/ev6Jwq0OU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/Q:g0KuOU/jIEeQfoR/IuOFVjUu5m
- TLSH T189265A1176E54472E1B205319961860D5A31B8A5C7378E8F738C6EDEBFF26C08E36B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_7f62e9b719d12c2e68b7daf3c6f867c6_amadey_cobalt-strike_glassworm_hijackloader_icedid_luca-.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_7f62e9b719d12c2e68b7daf3c6f867c6_amadey_cobalt-strike_glassworm_hijackloader_icedid_luca-.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_7f62e9b719d12c2e68b7daf3c6f867c6_amadey_cobalt-strike_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_vidar
- Size 4.4MB
- SHA256 e85d1c3fb44af90fc6f00a408ef291139e7bfb4e085328781f11b97832e2fd1e
- MD5 7f62e9b719d12c2e68b7daf3c6f867c6
- SHA1 4e7fb10ee79328f16ec0b6c9072ef233acb85562
- SHA512 794696ebbce4d43ffef449860f5cd9e37c17051eb6b8d1262221bfcebf72f224f9e1c9648057399b9f60e6c2c579739a4fe59c333ebbb2c84e230b1076af736a
- SSDEEP 49152:g0op/ev6Jwq0OU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/Q:g0KuOU/jIEeQfoR/IuOFVjUu5m
- TLSH T189265A1176E54472E1B205319961860D5A31B8A5C7378E8F738C6EDEBFF26C08E36B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.