General
- Target 2026-07-02_1741bfd52a16063ef300918feaf09db6_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc
- Size 841KB
- Sample260703-b4wwtaex5k
- SHA256 a025e807afe79a03314c7533b90ea1e21ef72981d794c14a414741524d4de1ea
- MD5 1741bfd52a16063ef300918feaf09db6
- SHA1 6079f81f1aaf0189513d8b30be9f8696ae43d90d
- SHA512 28b82c152220303016471704e9de6a25d248877c6f17a6195415d92b8cf621ea19bcdc5124a096452b8014d66edb64346d679142e086c3ac43f109908b3c5155
- SSDEEP 24576:kB1OnUpSz18n3rlj7yrJjHwI6h0lhSMXlicN5P/5:kenUpSz18n3rlj78jHX35P/5
- TLSH T1A8058D1AFBA942F8D077C178C992650AFAB27C5A436167CB0391796B2F336E05D3E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-02_1741bfd52a16063ef300918feaf09db6_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_1741bfd52a16063ef300918feaf09db6_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_1741bfd52a16063ef300918feaf09db6_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc
- Size 841KB
- SHA256 a025e807afe79a03314c7533b90ea1e21ef72981d794c14a414741524d4de1ea
- MD5 1741bfd52a16063ef300918feaf09db6
- SHA1 6079f81f1aaf0189513d8b30be9f8696ae43d90d
- SHA512 28b82c152220303016471704e9de6a25d248877c6f17a6195415d92b8cf621ea19bcdc5124a096452b8014d66edb64346d679142e086c3ac43f109908b3c5155
- SSDEEP 24576:kB1OnUpSz18n3rlj7yrJjHwI6h0lhSMXlicN5P/5:kenUpSz18n3rlj78jHX35P/5
- TLSH T1A8058D1AFBA942F8D077C178C992650AFAB27C5A436167CB0391796B2F336E05D3E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.