Analysis
- max time kernel
148s - max time network
124s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/06/2026, 17:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_2d4d17eb90d688ad2272983af8168852_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_2d4d17eb90d688ad2272983af8168852_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
General
- Target 2026-06-26_2d4d17eb90d688ad2272983af8168852_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe
- Size 1.2MB
- Sample260629-vsd2eaav5v
- SHA256 e40b81d11ebcad11ff2736ead163efb3fc513c73d9a936cd0cfebfb5fd226056
- MD5 2d4d17eb90d688ad2272983af8168852
- SHA1 0e945d4da0523bcc96ad034a122a56c985898de0
- SHA512 4f93345fcfffcaacc654731319abd2732947ddef5235253b154488aa508e943b324e12efa1b61ddd79828c2ed3eb8489a3199f600dabf30c1ff10f863660c05b
- SSDEEP 24576:ZjZhmWcUs8EnqneJqexPvAzoCVCJBTvNu/3fzFfo0bQH:Z5pAnqnewedhpBrNunpfu
- TLSH T193559F0773E6C1F9CE7B81F6C9215227EB7178600B389ADB2590862EDF63AD05E36711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 6088 2026-06-26_2d4d17eb90d688ad2272983af8168852_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 6088 2026-06-26_2d4d17eb90d688ad2272983af8168852_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 6088 2026-06-26_2d4d17eb90d688ad2272983af8168852_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 6088 2026-06-26_2d4d17eb90d688ad2272983af8168852_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 6088 2026-06-26_2d4d17eb90d688ad2272983af8168852_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 6088 2026-06-26_2d4d17eb90d688ad2272983af8168852_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 6088 2026-06-26_2d4d17eb90d688ad2272983af8168852_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-26_2d4d17eb90d688ad2272983af8168852_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-26_2d4d17eb90d688ad2272983af8168852_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:6088