General
- Target 2026-06-30_67960a9f7c7c576983cca5124027b993_cobalt-strike_glassworm_icedid_luca-stealer_njrat_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 1.4MB
- Sample260701-e724sagt6x
- SHA256 b7ee91e6a968d31d6b35239a637b7e0ac1cfa281a6269abb3c9475473df22fb7
- MD5 67960a9f7c7c576983cca5124027b993
- SHA1 04686f3c64a14d6dd5c2c8a1873b60c8758802a4
- SHA512 fd1a91e0885dcf30af1d690d78620d98aff1fe4011c3544e68f553012f02c3f6a43dbe7cf53dbf91bac594e851d37fc5232a752bd76961496e6be14cf347e1e7
- SSDEEP 24576:693gT9Ej5DrfzXdaxgAOZGspkqLCVHpZktAIn1brR7ZHFGjbhDZlnN:DRiNXdaxgAOZDp/Avkz1brR1HF69HN
- TLSH T1EC650201F79404F8E4F78A3485A645919E39FC9A0B71EADF13C8462D1F727E09E39B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-30_67960a9f7c7c576983cca5124027b993_cobalt-strike_glassworm_icedid_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_67960a9f7c7c576983cca5124027b993_cobalt-strike_glassworm_icedid_luca-stealer_njrat_remcos.exe
Resource
win11ltsc2024-20260630-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_67960a9f7c7c576983cca5124027b993_cobalt-strike_glassworm_icedid_luca-stealer_njrat_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 1.4MB
- SHA256 b7ee91e6a968d31d6b35239a637b7e0ac1cfa281a6269abb3c9475473df22fb7
- MD5 67960a9f7c7c576983cca5124027b993
- SHA1 04686f3c64a14d6dd5c2c8a1873b60c8758802a4
- SHA512 fd1a91e0885dcf30af1d690d78620d98aff1fe4011c3544e68f553012f02c3f6a43dbe7cf53dbf91bac594e851d37fc5232a752bd76961496e6be14cf347e1e7
- SSDEEP 24576:693gT9Ej5DrfzXdaxgAOZGspkqLCVHpZktAIn1brR7ZHFGjbhDZlnN:DRiNXdaxgAOZDp/Avkz1brR1HF69HN
- TLSH T1EC650201F79404F8E4F78A3485A645919E39FC9A0B71EADF13C8462D1F727E09E39B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association