General
- Target 2026-04-19_82b87b88b80e892c4996cd9c072e615b_amadey_cobalt-strike_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_stop_vidar_wannacry
- Size 10.3MB
- Sample260419-27ls5act3k
- SHA256 55210711a491dc42b05c522a4ca3957603009c5cc93516e80119b65ec831ad9c
- MD5 82b87b88b80e892c4996cd9c072e615b
- SHA1 956747e93d5510cb841ba61f5a5045b5addb7736
- SHA512 c3275a8c47f506a79d4154c7e80ac0fec11d1f2d896f4dcc2a96d0c961bcf24d08c9c9f7dfd27385bce46d6d8ba6f19dc4c6a823f58067ca25d62bb93a89db74
- SSDEEP 98304:LSERbqSERbwp7o5mtztMOU/jIEeQfoR/IuOFVjUu558SERbqSERbwp7o5mtztMOP:fo5mtztMFIF0wuXUo5mtztMFIF0wuX0V
- TLSH T164B6AD1176E08472F1B31631897AC261AA79BC610B3186CF73CC566E5F316D1EE3AB27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-19_82b87b88b80e892c4996cd9c072e615b_amadey_cobalt-strike_glassworm_hijackloader_icedid_luca-.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_82b87b88b80e892c4996cd9c072e615b_amadey_cobalt-strike_glassworm_hijackloader_icedid_luca-.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_82b87b88b80e892c4996cd9c072e615b_amadey_cobalt-strike_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_stop_vidar_wannacry
- Size 10.3MB
- SHA256 55210711a491dc42b05c522a4ca3957603009c5cc93516e80119b65ec831ad9c
- MD5 82b87b88b80e892c4996cd9c072e615b
- SHA1 956747e93d5510cb841ba61f5a5045b5addb7736
- SHA512 c3275a8c47f506a79d4154c7e80ac0fec11d1f2d896f4dcc2a96d0c961bcf24d08c9c9f7dfd27385bce46d6d8ba6f19dc4c6a823f58067ca25d62bb93a89db74
- SSDEEP 98304:LSERbqSERbwp7o5mtztMOU/jIEeQfoR/IuOFVjUu558SERbqSERbwp7o5mtztMOP:fo5mtztMFIF0wuXUo5mtztMFIF0wuX0V
- TLSH T164B6AD1176E08472F1B31631897AC261AA79BC610B3186CF73CC566E5F316D1EE3AB27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.