2026-06-27_8e05bc09877f6bdbc228745aa0905c12_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-27_8e05bc09877f6bdbc228745aa0905c12_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
Size 1.6MB
Sample260629-fs7ldsdx2s
SHA256 22a3c5b16bf7beed4d232d6b9e021009454c1585af664a219352596548c01b9b
MD5 8e05bc09877f6bdbc228745aa0905c12
SHA1 410422eec2d17be0f9e0520e39e734731a344932
SHA512 050ab8a7d763a60a2363602a6465eb56fc45bc5a1a92eeae524de13c1410469a062fc04080401256332f9e8364560cea4be4ba86fc5c136b5d68bacc6bc1ee4d
SSDEEP 24576:uekS96r43/tylgg9V2c0xCK+w8H4lWjq4k3itSh0lhSMXlnNp6ozco1I2llq:uekq603FMZ9V21C1ilW+36Prj1I2lY
TLSH
T15A75AE5A63A400FCD0ABD278CD579A06E372B8550B61A7CF03D19AA62F237E15E3F750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-27_8e05bc09877f6bdbc228745aa0905c12_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar

File Explorer

2026-06-27_8e05bc09877f6bdbc228745aa0905c12_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar

.exe 1.6MB

2026-06-27_8e05bc09877f6bdbc228745aa0905c12_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar

IMPHASH a0a2c5be15aab2c6afee5d6b42f5337e
SHA256 22a3c5b16bf7beed4d232d6b9e021009454c1585af664a219352596548c01b9b
MD5 8e05bc09877f6bdbc228745aa0905c12
SHA1 410422eec2d17be0f9e0520e39e734731a344932
SHA512 050ab8a7d763a60a2363602a6465eb56fc45bc5a1a92eeae524de13c1410469a062fc04080401256332f9e8364560cea4be4ba86fc5c136b5d68bacc6bc1ee4d
SSDEEP 24576:uekS96r43/tylgg9V2c0xCK+w8H4lWjq4k3itSh0lhSMXlnNp6ozco1I2llq:uekq603FMZ9V21C1ilW+36Prj1I2lY
TLSH
T15A75AE5A63A400FCD0ABD278CD579A06E372B8550B61A7CF03D19AA62F237E15E3F750
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

855468

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

crypt32

CertGetNameStringA CertCloseStore CertFreeCertificateChain CertGetCertificateChain CertFreeCertificateChainEngine CertCreateCertificateChainEngine CryptQueryObject CertOpenStore CertAddCertificateContextToStore CryptStringToBinaryA CertFreeCertificateContext CertFindCertificateInStore CertEnumCertificatesInStore

wldap32

ord41 ord22 ord26 ord27 ord32 ord50 ord35 ord79 ord30 ord200 ord301 ord45 ord217 ord143 ord33 ord211 ord46 ord60

kernel32

WaitForSingleObject HeapReAlloc GetFileSizeEx CreateFile2 UnmapViewOfFile CloseHandle CreateFileMappingFromApp MapViewOfFileFromApp GetCurrentProcess GetDriveTypeA GetVolumeInformationA GetLogicalDriveStringsA IsDebuggerPresent CheckRemoteDebuggerPresent GetLastError SetLastError FormatMessageA EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection FreeLibrary GetProcAddress Sleep SleepEx GetTickCount64 WaitForSingleObjectEx VerSetConditionMask GetSystemDirectoryA GetModuleHandleA LoadLibraryA VerifyVersionInfoA ExpandEnvironmentStringsA GetStdHandle GetExitCodeProcess ReadFile PeekNamedPipe WaitForMultipleObjects CreateFileA QueryPerformanceCounter QueryPerformanceFrequency FlushFileBuffers CreatePipe SetStdHandle HeapSize GetTimeZoneInformation IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetEndOfFile EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc GetConsoleOutputCP ReadConsoleW GetConsoleMode GetCommandLineW GetCommandLineA WriteFile GetModuleFileNameW SetFilePointerEx FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetDriveTypeW CreateProcessW DuplicateHandle FreeLibraryAndExitThread ExitThread CreateThread GetModuleHandleExW ExitProcess LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc WriteConsoleW GetFileType InitializeCriticalSectionAndSpinCount GetCurrentDirectoryW CreateDirectoryW CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW GetFileInformationByHandle GetFullPathNameW SetFileInformationByHandle AreFileApisANSI DeviceIoControl GetModuleHandleW CopyFileW GetFileInformationByHandleEx CreateSymbolicLinkW MultiByteToWideChar WideCharToMultiByte LocalFree GetLocaleInfoEx WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW GetCurrentThreadId GetExitCodeThread GetNativeSystemInfo RtlPcToFileHeader RaiseException ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive EncodePointer DecodePointer LCMapStringEx GetSystemTimeAsFileTime CompareStringEx GetCPInfo GetStringTypeW InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW GetCurrentProcessId RtlUnwindEx InterlockedPushEntrySList RtlUnwind

advapi32

RegOpenKeyExA GetUserNameA RegQueryValueExA RegCloseKey CryptAcquireContextA CryptReleaseContext CryptGetHashParam CryptGenRandom CryptCreateHash CryptHashData CryptDestroyHash CryptDestroyKey CryptImportKey CryptEncrypt

shell32

ShellExecuteA SHGetKnownFolderPath

ole32

CoTaskMemFree

ws2_32

getpeername getsockname send socket WSASocketW recv freeaddrinfo getnameinfo setsockopt WSACleanup WSAStartup listen shutdown select closesocket bind accept getaddrinfo gethostname WSAGetLastError __WSAFDIsSet WSASetLastError connect getsockopt htons WSAIoctl recvfrom sendto ioctlsocket htonl ntohl ntohs

iphlpapi

GetAdaptersInfo

d3d9

Direct3DCreate9

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-27_8e05bc09877f6bdbc228745aa0905c12_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar

crypt32

wldap32

kernel32

advapi32

shell32

ole32

ws2_32

iphlpapi

d3d9

generic