General
- Target 2026-04-20_acb6206f910d88fd55530f8f7cc003cd_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 9.0MB
- Sample260420-e7v1gacz8s
- SHA256 2c4d8e389f907c61ee2631357a9333177033a8418c1cc19e199ff58feb254432
- MD5 acb6206f910d88fd55530f8f7cc003cd
- SHA1 d12fdd7bbcbfcd46b68e76fb6bedbb734fa4c55b
- SHA512 935a0a1c567e16b25351d9f3a9b67255ccc66c41a7268d6605185be6b2dbc77e64c5020e769547196a3c23765b9f09d2345e60f1d98f67fd1675b6c25b886ac4
- SSDEEP 196608:a6xc9VjA1HeT39Iig7auDXURuAGCTMQ4qdd84Wihx:9xcO1+TtIinuARuAWQ4qdK+
- TLSH T18C96336963B209F4F8B5957ED0B7C25AF272B0664774D78F23A006520F27BA15C3EB42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-20_acb6206f910d88fd55530f8f7cc003cd_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260130-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-20_acb6206f910d88fd55530f8f7cc003cd_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11-20260130-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_acb6206f910d88fd55530f8f7cc003cd_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 9.0MB
- SHA256 2c4d8e389f907c61ee2631357a9333177033a8418c1cc19e199ff58feb254432
- MD5 acb6206f910d88fd55530f8f7cc003cd
- SHA1 d12fdd7bbcbfcd46b68e76fb6bedbb734fa4c55b
- SHA512 935a0a1c567e16b25351d9f3a9b67255ccc66c41a7268d6605185be6b2dbc77e64c5020e769547196a3c23765b9f09d2345e60f1d98f67fd1675b6c25b886ac4
- SSDEEP 196608:a6xc9VjA1HeT39Iig7auDXURuAGCTMQ4qdd84Wihx:9xcO1+TtIinuARuAWQ4qdK+
- TLSH T18C96336963B209F4F8B5957ED0B7C25AF272B0664774D78F23A006520F27BA15C3EB42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL