Overview

overview

10

Static

static

3

2026-05-04...ar.exe

windows10-2004-x64

7

2026-05-04...ar.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-05-04_51f2f1c01c1505fcb66ebc9b75560dc9_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
  • Size 97.1MB
  • Sample260504-ven98afy6t
  • SHA256 d3b668e0bb84822da26bf0ec39b5ea3429cba682f04f5ec01c714998b6192237
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
iris_stealerstealer

Malware Config

Targets

    • Target
      2026-05-04_51f2f1c01c1505fcb66ebc9b75560dc9_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
    • Size 97.1MB
    • SHA256 d3b668e0bb84822da26bf0ec39b5ea3429cba682f04f5ec01c714998b6192237
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    iris_stealerstealer

    • Family: Iris Stealer

      Iris Stealer is an infostealer written in Python and packaged with PyInstaller.

      stealeriris_stealer

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks