General
- Target 2026-06-05_0ddbc3bdc0d4983676421d3a338b1778_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 12.3MB
- Sample260605-3dxtzagv5p
- SHA256 fbaf3e61bf06d9069d17b029f4019a8117d06e447a1f3e95ab3ad46f2af4026f
- MD5 0ddbc3bdc0d4983676421d3a338b1778
- SHA1 22e7efb950733b3936850094e1d005a632f679af
- SHA512 7e86bddb808e591b5875ed16d6669f4f4c8f17f357263e5c8de6b5dd946edbb8bf104304d420fa1b61cf59903c5e23450161a27fc893d9a4f1d5e2e4422b8961
- SSDEEP 393216:7tnFsxAqn/hOUF4oLgv4SiQYp5967s7qti:RnmxAlVti
- TLSH T1DDD65B2765A901ECD0BBE1BC8E1B5E03E775740A037596EF07E085622E976E18F3E760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-05_0ddbc3bdc0d4983676421d3a338b1778_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-05_0ddbc3bdc0d4983676421d3a338b1778_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-05_0ddbc3bdc0d4983676421d3a338b1778_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 12.3MB
- SHA256 fbaf3e61bf06d9069d17b029f4019a8117d06e447a1f3e95ab3ad46f2af4026f
- MD5 0ddbc3bdc0d4983676421d3a338b1778
- SHA1 22e7efb950733b3936850094e1d005a632f679af
- SHA512 7e86bddb808e591b5875ed16d6669f4f4c8f17f357263e5c8de6b5dd946edbb8bf104304d420fa1b61cf59903c5e23450161a27fc893d9a4f1d5e2e4422b8961
- SSDEEP 393216:7tnFsxAqn/hOUF4oLgv4SiQYp5967s7qti:RnmxAlVti
- TLSH T1DDD65B2765A901ECD0BBE1BC8E1B5E03E775740A037596EF07E085622E976E18F3E760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1