General
- Target 2026-06-29_bb78ac473a090efc5917b5e8dca6aa84_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc
- Size 841KB
- Sample260630-evpb6aet71
- SHA256 01964d47623d6be9e645b2dabc110328291ced7c0a36b3e0e2b6f89459a3c3d9
- MD5 bb78ac473a090efc5917b5e8dca6aa84
- SHA1 3afe8f03550667151fb5ddb599c041072724c5b8
- SHA512 c1bcd8174b287339669ed1d9b2b27eef732c80ff7c19757d1d284124a3cc146d141ceb08a4eca3d80f528cfdd0882284699cd179f4d8e8763145be0e9bca9908
- SSDEEP 24576:Cv3k40zE2dtjHyBbkI1h0lhSMXlyPOvJi:23k40zE2dtjarsRBi
- TLSH T177058D2AEBA942F8D07BC178C992650AFAB27C5A436167CB039175672F336E05D3F701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-06-29_bb78ac473a090efc5917b5e8dca6aa84_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_bb78ac473a090efc5917b5e8dca6aa84_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_bb78ac473a090efc5917b5e8dca6aa84_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc
- Size 841KB
- SHA256 01964d47623d6be9e645b2dabc110328291ced7c0a36b3e0e2b6f89459a3c3d9
- MD5 bb78ac473a090efc5917b5e8dca6aa84
- SHA1 3afe8f03550667151fb5ddb599c041072724c5b8
- SHA512 c1bcd8174b287339669ed1d9b2b27eef732c80ff7c19757d1d284124a3cc146d141ceb08a4eca3d80f528cfdd0882284699cd179f4d8e8763145be0e9bca9908
- SSDEEP 24576:Cv3k40zE2dtjHyBbkI1h0lhSMXlyPOvJi:23k40zE2dtjarsRBi
- TLSH T177058D2AEBA942F8D07BC178C992650AFAB27C5A436167CB039175672F336E05D3F701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.