General
- Target 2026-05-30_5fe407e9469664bfb710344234f6bed1_cobalt-strike_glassworm_icedid_luca-stealer_njrat_ryuk_satacom_stealc_vidar_xworm
- Size 623KB
- Sample260530-pyfvaset5m
- SHA256 67a85675ed916d16d2e5c23e7228a40c4dfe4bdd9b4fc983076e88244c4a16b7
- MD5 5fe407e9469664bfb710344234f6bed1
- SHA1 eff30b94ed86781d184c266cb7d50afd5706bde8
- SHA512 78611d1edc01a7260384b57ab33d0c747956a0dffaf7a74b38d5dc0741ced5b75849623e13f3a6f42938841b9be384143061dbaf78e14bf7170c79f57f5c9a0f
- SSDEEP 12288:pYyDi5eNiQ7uysMFZzN/z/msuF3omHDmD+0wJ1BwM+e:6bvgQBHDfaM+e
- TLSH T110D46C02F75C3CFDD466C13489B24592AB35FC661B60AADF139467262E332E1BE39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-30_5fe407e9469664bfb710344234f6bed1_cobalt-strike_glassworm_icedid_luca-stealer_njrat_ryuk_s.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-30_5fe407e9469664bfb710344234f6bed1_cobalt-strike_glassworm_icedid_luca-stealer_njrat_ryuk_s.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-30_5fe407e9469664bfb710344234f6bed1_cobalt-strike_glassworm_icedid_luca-stealer_njrat_ryuk_satacom_stealc_vidar_xworm
- Size 623KB
- SHA256 67a85675ed916d16d2e5c23e7228a40c4dfe4bdd9b4fc983076e88244c4a16b7
- MD5 5fe407e9469664bfb710344234f6bed1
- SHA1 eff30b94ed86781d184c266cb7d50afd5706bde8
- SHA512 78611d1edc01a7260384b57ab33d0c747956a0dffaf7a74b38d5dc0741ced5b75849623e13f3a6f42938841b9be384143061dbaf78e14bf7170c79f57f5c9a0f
- SSDEEP 12288:pYyDi5eNiQ7uysMFZzN/z/msuF3omHDmD+0wJ1BwM+e:6bvgQBHDfaM+e
- TLSH T110D46C02F75C3CFDD466C13489B24592AB35FC661B60AADF139467262E332E1BE39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association