General
- Target 2026-07-02_4c2468486843d5caf409ce0f6e213f3e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 878KB
- Sample260702-wcjsdsa16y
- SHA256 6df30d7f7ba2941a2048513cb468e512db3b87492608325a5ac91735762c7621
- MD5 4c2468486843d5caf409ce0f6e213f3e
- SHA1 1454fb61d23b10250a9670fab4b6b02e953c7070
- SHA512 4db5a572c089874689b6c5a77f9344afdef98d4f7d2ec7b95899abe52673a62da7716f4759d19b4701db071123733884dcd69f28e42afa93aca622e4fa60bd77
- SSDEEP 12288:KptEwQax+0OLZn2zeEqODKlwoSFU6YrtHCB/EO0/YtSYExD1I42vpfj8flmDxcTU:6tzOLZn2itOQSokB/EO02fA1I42D
- TLSH T175156D16A66800BDD0B7C6B4CE665D43E771B84B0370AADB03D05AA63F177E49E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_4c2468486843d5caf409ce0f6e213f3e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_4c2468486843d5caf409ce0f6e213f3e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 878KB
- SHA256 6df30d7f7ba2941a2048513cb468e512db3b87492608325a5ac91735762c7621
- MD5 4c2468486843d5caf409ce0f6e213f3e
- SHA1 1454fb61d23b10250a9670fab4b6b02e953c7070
- SHA512 4db5a572c089874689b6c5a77f9344afdef98d4f7d2ec7b95899abe52673a62da7716f4759d19b4701db071123733884dcd69f28e42afa93aca622e4fa60bd77
- SSDEEP 12288:KptEwQax+0OLZn2zeEqODKlwoSFU6YrtHCB/EO0/YtSYExD1I42vpfj8flmDxcTU:6tzOLZn2itOQSokB/EO02fA1I42D
- TLSH T175156D16A66800BDD0B7C6B4CE665D43E771B84B0370AADB03D05AA63F177E49E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.