General
- Target 2026-05-11_f5c203df510c580700c01021ccc0e882_cobalt-strike_glassworm_icedid_luca-stealer_njrat_remcos_satacom_vidar
- Size 11.0MB
- Sample260511-ppaxpads4k
- SHA256 f07152b226566f9601bff81eb021eb89399bf19680cd98efe55d1759a8bb2d57
- MD5 f5c203df510c580700c01021ccc0e882
- SHA1 ed516a54561987d9c8202d5f8e06a349ba40851d
- SHA512 f3f9b24bfa0db09cea56e3a8a96e651448b075ed8627b39e3a978948ef396a9702eae89a80ae4ee23e13ef89f884c8dc08a334bb3a7cf5c288e3f803817c066b
- SSDEEP 196608:gHF3GxbAQv3wejuJDUX47dwdW0LBJ1LJHDXYPAZ9Q0aBAFhWnef1nhW+sHZGu2:wFWxfaUX47d4JVZ93aBkhKKFhW+s5W
- TLSH T1E1C633A55AB010E6D88A933144414B41AA32BC519754C1CBF36CF376AF33E98DF3D6EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-11_f5c203df510c580700c01021ccc0e882_cobalt-strike_glassworm_icedid_luca-stealer_njrat_remcos_satacom_vidar.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_f5c203df510c580700c01021ccc0e882_cobalt-strike_glassworm_icedid_luca-stealer_njrat_remcos_satacom_vidar.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_f5c203df510c580700c01021ccc0e882_cobalt-strike_glassworm_icedid_luca-stealer_njrat_remcos_satacom_vidar
- Size 11.0MB
- SHA256 f07152b226566f9601bff81eb021eb89399bf19680cd98efe55d1759a8bb2d57
- MD5 f5c203df510c580700c01021ccc0e882
- SHA1 ed516a54561987d9c8202d5f8e06a349ba40851d
- SHA512 f3f9b24bfa0db09cea56e3a8a96e651448b075ed8627b39e3a978948ef396a9702eae89a80ae4ee23e13ef89f884c8dc08a334bb3a7cf5c288e3f803817c066b
- SSDEEP 196608:gHF3GxbAQv3wejuJDUX47dwdW0LBJ1LJHDXYPAZ9Q0aBAFhWnef1nhW+sHZGu2:wFWxfaUX47d4JVZ93aBkhKKFhW+s5W
- TLSH T1E1C633A55AB010E6D88A933144414B41AA32BC519754C1CBF36CF376AF33E98DF3D6EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application