General
- Target 2026-06-02_170673bb7450d0e2fd8644d88c63740c_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 10.3MB
- Sample260602-rxea7agz8m
- SHA256 b9f04cb3400608bbe04f4a2aace101a7f2ff53c136062b6d9c3112a81f345f13
- MD5 170673bb7450d0e2fd8644d88c63740c
- SHA1 e532f10a8777461f66e1b98dec688d34938e5867
- SHA512 319ea337525644131dcaf65ab20bcb25e279bfeb0f34b26f31666f88eec9fadb29ef9d14b6eada342c359cd39756d84947b40e79607c4f6dda51c53bc4186723
- SSDEEP 196608:sele+9kpl4+s1QXuff0HiouWJysVYvsOaoyMxxvjDDAx0aiyjdx:hFaplE1gu0Hi9WJdoyMxtDDAxmy5
- TLSH T115B60261B29180E4D3FB907485E25951D37AFCB50B238C8F036D3A25AF3FA845F2A765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-02_170673bb7450d0e2fd8644d88c63740c_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_170673bb7450d0e2fd8644d88c63740c_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
syuv
C2
-
http://176.46.152.21
Attributes
-
url_path
/72024bc494bfc6ba.php
rc4.traffic_key
rc4.C2
Targets
-
- Target 2026-06-02_170673bb7450d0e2fd8644d88c63740c_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 10.3MB
- SHA256 b9f04cb3400608bbe04f4a2aace101a7f2ff53c136062b6d9c3112a81f345f13
- MD5 170673bb7450d0e2fd8644d88c63740c
- SHA1 e532f10a8777461f66e1b98dec688d34938e5867
- SHA512 319ea337525644131dcaf65ab20bcb25e279bfeb0f34b26f31666f88eec9fadb29ef9d14b6eada342c359cd39756d84947b40e79607c4f6dda51c53bc4186723
- SSDEEP 196608:sele+9kpl4+s1QXuff0HiouWJysVYvsOaoyMxxvjDDAx0aiyjdx:hFaplE1gu0Hi9WJdoyMxtDDAxmy5
- TLSH T115B60261B29180E4D3FB907485E25951D37AFCB50B238C8F036D3A25AF3FA845F2A765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10