General
- Target 2026-07-05_08d1b58f3e9df8230a358193dada3a77_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 35.5MB
- Sample260705-m6dc2ab12y
- SHA256 59737a725a3b9c18b95457cffae2943d7d348f31ebe380202982f67b1da963b1
- MD5 08d1b58f3e9df8230a358193dada3a77
- SHA1 56f8acdbe0fbc2400c8a78a5ec6c2aa50e5c71ad
- SHA512 6d1b5a91e418f94852c51360911be33f1611fff632c1d78cd39db04e9b11b7bdf247d47cdb7d2f68ab87400a3c1ee3e45ea02fe3ed5f0ee2633423edb6815c33
- SSDEEP 786432:kdLcqPKcXa1QtIkqaV+sEbnFi5cCuAH0W8YM3YtKNdW4k18JDYBy2zdIGGc:SL1yWmiI9aV+BbnQpZH0WrH1gUByJGG
- TLSH T1A387336EA26209BFF8C4907FA99B81BB9E92A1194739C54F07A034435E5F7E14D3DE03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-05_08d1b58f3e9df8230a358193dada3a77_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_08d1b58f3e9df8230a358193dada3a77_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_08d1b58f3e9df8230a358193dada3a77_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 35.5MB
- SHA256 59737a725a3b9c18b95457cffae2943d7d348f31ebe380202982f67b1da963b1
- MD5 08d1b58f3e9df8230a358193dada3a77
- SHA1 56f8acdbe0fbc2400c8a78a5ec6c2aa50e5c71ad
- SHA512 6d1b5a91e418f94852c51360911be33f1611fff632c1d78cd39db04e9b11b7bdf247d47cdb7d2f68ab87400a3c1ee3e45ea02fe3ed5f0ee2633423edb6815c33
- SSDEEP 786432:kdLcqPKcXa1QtIkqaV+sEbnFi5cCuAH0W8YM3YtKNdW4k18JDYBy2zdIGGc:SL1yWmiI9aV+BbnQpZH0WrH1gUByJGG
- TLSH T1A387336EA26209BFF8C4907FA99B81BB9E92A1194739C54F07A034435E5F7E14D3DE03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.