2026-07-06_82a0525e0f9faf0d194c91ab4dfd8cd4_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-06_82a0525e0f9faf0d194c91ab4dfd8cd4_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
Size 8.0MB
Sample260706-ngxaaaat2k
SHA256 152b63d48bafee38c65a8adfdfac7607a89f2db4a082dfb440cc6fac2d1b5344
MD5 82a0525e0f9faf0d194c91ab4dfd8cd4
SHA1 fa5e5547ccf48eb6f18bbfd77e6e12b238958706
SHA512 54b499f72396a323536a42c1b6de30cc5c8672220b5949c2b99763e3ce92ebb80400eee7b18a132daf452021106f372947bc21c71d956965c6d317efd595bcfc
SSDEEP 196608:2i8fs2GLik4qsO8fOaOtS+eV4OGN/8UXkQX8j2xGW/hQWpzd3iLM+lYGQs6/LD6:2i8fs2GLik4qsvfOaOtS+eV4OGN0IkQ5
TLSH
T124869E6A326800E8C1BBD17CCF069A13E7B2B45503709BEB05E146666F27AF55E7FB10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_82a0525e0f9faf0d194c91ab4dfd8cd4_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar

File Explorer

2026-07-06_82a0525e0f9faf0d194c91ab4dfd8cd4_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar

.exe 8.0MB

2026-07-06_82a0525e0f9faf0d194c91ab4dfd8cd4_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar

IMPHASH 1636687a70c325af7b3c43fd53925507
SHA256 152b63d48bafee38c65a8adfdfac7607a89f2db4a082dfb440cc6fac2d1b5344
MD5 82a0525e0f9faf0d194c91ab4dfd8cd4
SHA1 fa5e5547ccf48eb6f18bbfd77e6e12b238958706
SHA512 54b499f72396a323536a42c1b6de30cc5c8672220b5949c2b99763e3ce92ebb80400eee7b18a132daf452021106f372947bc21c71d956965c6d317efd595bcfc
SSDEEP 196608:2i8fs2GLik4qsO8fOaOtS+eV4OGN/8UXkQX8j2xGW/hQWpzd3iLM+lYGQs6/LD6:2i8fs2GLik4qsvfOaOtS+eV4OGN0IkQ5
TLSH
T124869E6A326800E8C1BBD17CCF069A13E7B2B45503709BEB05E146666F27AF55E7FB10
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4037584

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\build\output\unity\unity\artifacts\tools\CgBatch\release_Win_x64_VS2022_VB_MT\UnityShaderCompiler_x64.pdb

kernel32

CreateFileW GetFileSize ReadFile CloseHandle MultiByteToWideChar FormatMessageA GetLastError FreeLibrary GetProcAddress LoadLibraryA GetCurrentProcessId WriteFile PeekNamedPipe GetOverlappedResult CancelIo WaitForSingleObject CreateEventW TlsGetValue TlsSetValue GetModuleFileNameW GetModuleHandleW WideCharToMultiByte CreateDirectoryW DeleteFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW FlushFileBuffers GetDiskFreeSpaceExW GetFileAttributesW GetFileAttributesExW GetFileSizeEx GetFullPathNameW GetTempFileNameW RemoveDirectoryW SetEndOfFile SetFileAttributesW SetFilePointer SetFilePointerEx SetFileTime GetSystemTime CopyFileW MoveFileExW ReplaceFileW SystemTimeToFileTime SwitchToThread CreateThread GetCurrentThread GetCurrentThreadId SetThreadPriority GetThreadPriority ResumeThread SetThreadDescription SleepEx WaitForSingleObjectEx SetWaitableTimer CreateWaitableTimerExW LoadLibraryW RtlCaptureContext QueryPerformanceFrequency RtlVirtualUnwind GetCurrentProcess SetLastError GetEnvironmentVariableA HeapAlloc HeapFree GetProcessHeap GetLogicalProcessorInformationEx LocalFree FormatMessageW SetUnhandledExceptionFilter SetErrorMode GetTickCount TlsAlloc TlsFree InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualAlloc VirtualProtect VirtualFree LoadLibraryExW SetEnvironmentVariableA IsDebuggerPresent SetConsoleTextAttribute GetConsoleScreenBufferInfo WriteConsoleW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage HeapQueryInformation HeapSize CreateProcessW GetExitCodeProcess SetStdHandle ReadConsoleW HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW RtlLookupFunctionEntry QueryPerformanceCounter FlsFree FlsSetValue FlsGetValue FlsAlloc GetCommandLineW GetCommandLineA GetStdHandle GetModuleHandleExW ExitProcess GetConsoleMode GetConsoleOutputCP GetFileType InitializeCriticalSectionAndSpinCount RtlUnwindEx RaiseException RtlPcToFileHeader GetStringTypeW GetCPInfo RtlUnwind LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx TerminateProcess InitializeSListHead GetSystemTimeAsFileTime IsProcessorFeaturePresent GetStartupInfoW UnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive CreateMutexW ReleaseMutex

user32

SetTimer KillTimer MessageBoxW

shell32

SHGetKnownFolderPath SHFileOperationW

ole32

CoCreateGuid CoTaskMemFree

shlwapi

PathCanonicalizeW

ws2_32

WSASetLastError WSAGetLastError select connect recv ioctlsocket closesocket WSASocketW __WSAFDIsSet htons inet_addr recvfrom send shutdown WSAStartup WSACleanup

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

spirv-cross-c-shared

spvc_context_destroy spvc_context_create spvc_msl_resource_binding_init spvc_compiler_compile spvc_context_parse_spirv spvc_context_create_compiler spvc_compiler_create_compiler_options spvc_compiler_options_set_bool spvc_compiler_mask_stage_output_by_location spvc_compiler_mask_stage_output_by_builtin spvc_compiler_msl_add_resource_binding spvc_compiler_msl_is_shader_input_used spvc_compiler_msl_remap_constexpr_sampler spvc_compiler_msl_get_automatic_resource_binding spvc_compiler_get_active_interface_variables spvc_compiler_set_enabled_interface_variables spvc_compiler_create_shader_resources spvc_compiler_options_set_uint spvc_resources_get_builtin_resource_list_for_type spvc_compiler_set_decoration spvc_compiler_set_name spvc_compiler_unset_decoration spvc_compiler_has_decoration spvc_compiler_get_name spvc_compiler_get_decoration spvc_compiler_get_member_decoration spvc_compiler_buffer_get_hlsl_counter_buffer spvc_constant_get_type spvc_compiler_get_active_buffer_ranges spvc_compiler_get_constant_handle spvc_compiler_get_specialization_constants spvc_compiler_get_combined_image_samplers spvc_compiler_build_combined_image_samplers spvc_compiler_build_dummy_sampler_for_combined_images spvc_compiler_type_struct_member_array_stride spvc_compiler_type_struct_member_offset spvc_compiler_get_declared_struct_member_size spvc_compiler_get_declared_struct_size spvc_type_get_image_is_storage spvc_type_get_image_multisampled spvc_type_get_image_arrayed spvc_context_get_last_error_string spvc_resources_get_resource_list_for_type spvc_compiler_install_compiler_options spvc_type_get_image_dimension spvc_type_get_image_sampled_type spvc_type_get_member_type spvc_type_get_num_member_types spvc_type_get_array_dimension spvc_type_array_dimension_is_literal spvc_type_get_num_array_dimensions spvc_type_get_columns spvc_type_get_vector_size spvc_type_get_bit_width spvc_type_get_basetype spvc_type_get_base_type_id spvc_compiler_get_type_handle spvc_compiler_has_active_builtin spvc_compiler_update_active_builtins spvc_compiler_get_execution_mode_argument_by_index spvc_compiler_get_execution_modes spvc_compiler_rename_entry_point spvc_context_set_error_callback spvc_compiler_get_member_name

Name

.text

Size

5.5MB

Virtual Size

5.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

147KB

Virtual Size

6.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

155KB

Virtual Size

154KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

904B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

604KB

Virtual Size

608KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-06_82a0525e0f9faf0d194c91ab4dfd8cd4_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar

kernel32

user32

shell32

ole32

shlwapi

ws2_32

api-ms-win-core-synch-l1-2-0

spirv-cross-c-shared

generic