Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
22/05/2026, 02:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_02bc514d2c671d40b88a457c66eb922f_cobalt-strike_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_02bc514d2c671d40b88a457c66eb922f_cobalt-strike_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target 2026-05-22_02bc514d2c671d40b88a457c66eb922f_cobalt-strike_glassworm_icedid_luca-stealer_njrat.exe
- Size 1.2MB
- Sample260522-cps22scv3p
- SHA256 6af8925b3ab028196e07bcb39a67212563a83e6965a7d3f1a5855140de40750e
- MD5 02bc514d2c671d40b88a457c66eb922f
- SHA1 806460b7d2692b436dbb7f830c22b8283e393d6f
- SHA512 61f88ec09c9697d9df9df93b42fac41a8c462ce58db0d4ed965d719d5ac6f2642a49b2ac93ef3153edc8a245fd67ed152ca778607bc6c8768e15f7a4a032cfb1
- SSDEEP 24576:E2ctIvKqwpMKvT7QvYMy91tA2DP2crkmQNHElqKlRRaB8D:ZToMKvPQvOi8AmQNsrlLa8
- TLSH T1FC459F0773E7C1E9DE7BC1F9C5614226EB31B8640B389ADB2590452EEF63AD04E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2140 2026-05-22_02bc514d2c671d40b88a457c66eb922f_cobalt-strike_glassworm_icedid_luca-stealer_njrat.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2140 2026-05-22_02bc514d2c671d40b88a457c66eb922f_cobalt-strike_glassworm_icedid_luca-stealer_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-22_02bc514d2c671d40b88a457c66eb922f_cobalt-strike_glassworm_icedid_luca-stealer_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-22_02bc514d2c671d40b88a457c66eb922f_cobalt-strike_glassworm_icedid_luca-stealer_njrat.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2140