General
- Target 2026-05-05_b9622018582c82f8bc3b8db6d25a905c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 16.1MB
- Sample260505-c5q8dsbs7p
- SHA256 10bd8bc5ed1731b7dc0ca2c477e751153b8280ad55b04dc09c6a32a22911e2ae
- MD5 b9622018582c82f8bc3b8db6d25a905c
- SHA1 7a1ae20930c112361f697596fff29ab481f863a7
- SHA512 0f4f0174a09172f6bbba5bf0fbf425703f2f66d3a0d29a7713b4cadc684f2af5ec1e62dc2ac84b7aefbc6fc201a5a85b7862ced2d0e002c3f177d3e8cedb9ff9
- SSDEEP 393216:rcM0Y6zdZ11a8W1+TtIiFY0V8/3c1tEF6gjv2CqLImjIle:j6Pa8W1QtIk0c1t6bvoLIUIle
- TLSH T1C1073354A3620CDBE1EF143A85B2CF35FAF7B84A4761C2CF57EC16851A532C54E3AA12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-05_b9622018582c82f8bc3b8db6d25a905c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-05_b9622018582c82f8bc3b8db6d25a905c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-05_b9622018582c82f8bc3b8db6d25a905c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 16.1MB
- SHA256 10bd8bc5ed1731b7dc0ca2c477e751153b8280ad55b04dc09c6a32a22911e2ae
- MD5 b9622018582c82f8bc3b8db6d25a905c
- SHA1 7a1ae20930c112361f697596fff29ab481f863a7
- SHA512 0f4f0174a09172f6bbba5bf0fbf425703f2f66d3a0d29a7713b4cadc684f2af5ec1e62dc2ac84b7aefbc6fc201a5a85b7862ced2d0e002c3f177d3e8cedb9ff9
- SSDEEP 393216:rcM0Y6zdZ11a8W1+TtIiFY0V8/3c1tEF6gjv2CqLImjIle:j6Pa8W1QtIk0c1t6bvoLIUIle
- TLSH T1C1073354A3620CDBE1EF143A85B2CF35FAF7B84A4761C2CF57EC16851A532C54E3AA12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.