General
- Target 2026-05-06_843789abf1d7819cb82915b09d4f1c7e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom
- Size 17.4MB
- Sample260506-23cdwsbx4x
- SHA256 a2381032bf39cb4d23734b0527c82cca198ebb55bc8647bc97a890ada18f1bbe
- MD5 843789abf1d7819cb82915b09d4f1c7e
- SHA1 073675c65c33bba4ca1c43fe6a4d1a8f861a930a
- SHA512 46b5c3618434145e6e0e3017758ac8b37289d1279233705ec9d2d4ae7bf6a0357662ead0db5a406b4ad9b51c1dc0e14e7fc9a64eb35793bd13050bf77980fde2
- SSDEEP 196608:3AgulVzf4FbW86hrfUNpDLrDGRDbWlcXEWGlA2eGXigGh6ZFNOL:3ANlVD4FbT6hbUNNrDGUGGlA2eeahW/
- TLSH T1A607AE19A3E404A5E47BDB74CA25C333DAB1BCA26635C20F0559F6861F73A528F2F721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-06_843789abf1d7819cb82915b09d4f1c7e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-06_843789abf1d7819cb82915b09d4f1c7e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-06_843789abf1d7819cb82915b09d4f1c7e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom
- Size 17.4MB
- SHA256 a2381032bf39cb4d23734b0527c82cca198ebb55bc8647bc97a890ada18f1bbe
- MD5 843789abf1d7819cb82915b09d4f1c7e
- SHA1 073675c65c33bba4ca1c43fe6a4d1a8f861a930a
- SHA512 46b5c3618434145e6e0e3017758ac8b37289d1279233705ec9d2d4ae7bf6a0357662ead0db5a406b4ad9b51c1dc0e14e7fc9a64eb35793bd13050bf77980fde2
- SSDEEP 196608:3AgulVzf4FbW86hrfUNpDLrDGRDbWlcXEWGlA2eGXigGh6ZFNOL:3ANlVD4FbT6hbUNNrDGUGGlA2eeahW/
- TLSH T1A607AE19A3E404A5E47BDB74CA25C333DAB1BCA26635C20F0559F6861F73A528F2F721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Adds Run key to start application
-
Suspicious use of SetThreadContext