General
- Target 2026-06-30_acf1fe9e69147a5db672e9396ccd0dc5_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat_remcos_ryuk_satacom_smoke-loader_stealc_vidar_xworm
- Size 589KB
- Sample260701-dw1adadv5p
- SHA256 cfd6fa508a31ad735ded1d1619bed98ea768391270f63500dca8d2f7e4244756
- MD5 acf1fe9e69147a5db672e9396ccd0dc5
- SHA1 8f211b90a3e1829da5f501dc335ee3c2292f45fb
- SHA512 540be8deab910aa2833d546d7b55ecc974d121144b98c8562213d85477cb6644736a1b8c323ac84a8b0ed364748ce66da4af037fd262a4b41ead8531cf9aafc5
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msup7sqrbA62A+xy4rvx+aFSy:693gTDrbr+I4rvxLEy
- TLSH T130D4AF11F79144F5D4B7853449E246629E79BCAA0B31EEEF13D8432A1F327E08E39B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-30_acf1fe9e69147a5db672e9396ccd0dc5_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_acf1fe9e69147a5db672e9396ccd0dc5_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_acf1fe9e69147a5db672e9396ccd0dc5_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat_remcos_ryuk_satacom_smoke-loader_stealc_vidar_xworm
- Size 589KB
- SHA256 cfd6fa508a31ad735ded1d1619bed98ea768391270f63500dca8d2f7e4244756
- MD5 acf1fe9e69147a5db672e9396ccd0dc5
- SHA1 8f211b90a3e1829da5f501dc335ee3c2292f45fb
- SHA512 540be8deab910aa2833d546d7b55ecc974d121144b98c8562213d85477cb6644736a1b8c323ac84a8b0ed364748ce66da4af037fd262a4b41ead8531cf9aafc5
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msup7sqrbA62A+xy4rvx+aFSy:693gTDrbr+I4rvxLEy
- TLSH T130D4AF11F79144F5D4B7853449E246629E79BCAA0B31EEEF13D8432A1F327E08E39B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association