General
- Target 2026-07-03_c09d721e0bb917db407069552c68114e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 159KB
- Sample260703-pfdbfsdy3k
- SHA256 03185b05f6f5d27beea940a3bd640a352d6f4370b6cad92d318ab12b0bb3a5cc
- MD5 c09d721e0bb917db407069552c68114e
- SHA1 2d20943aba09538eddc26d9ae431a102bd9c77b0
- SHA512 9c4994e707291e8c087c96a4e26dd64233196231a549eef44a207095dc95a7128f2e09efe5bde6b96828268bcc4280d2d51431a8ca6f13bda6f68a11f614aeb0
- SSDEEP 1536:hg9u2e/S1lnIiG21X1ilKC5A8+htNeJFG2THMSp/LzbXn6P98+wGDrsWbdJ9dlW:izl5VFGbohtNebsC/bX6l8+xHhsPhq
- TLSH T17FF35B1773E530F9E1B38678C9614606F77278305B60AADF03A456792F236D19E3EB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_c09d721e0bb917db407069552c68114e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_c09d721e0bb917db407069552c68114e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_c09d721e0bb917db407069552c68114e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 159KB
- SHA256 03185b05f6f5d27beea940a3bd640a352d6f4370b6cad92d318ab12b0bb3a5cc
- MD5 c09d721e0bb917db407069552c68114e
- SHA1 2d20943aba09538eddc26d9ae431a102bd9c77b0
- SHA512 9c4994e707291e8c087c96a4e26dd64233196231a549eef44a207095dc95a7128f2e09efe5bde6b96828268bcc4280d2d51431a8ca6f13bda6f68a11f614aeb0
- SSDEEP 1536:hg9u2e/S1lnIiG21X1ilKC5A8+htNeJFG2THMSp/LzbXn6P98+wGDrsWbdJ9dlW:izl5VFGbohtNebsC/bX6l8+xHhsPhq
- TLSH T17FF35B1773E530F9E1B38678C9614606F77278305B60AADF03A456792F236D19E3EB22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Uses browser remote debugging
Can be used control the browser and steal sensitive information such as credentials and session cookies.