General
- Target 2026-07-06_927ad8466519c0b6f73b11c9b7c3d30c_cobalt-strike_darkgate_gcleaner_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 16.8MB
- Sample260707-cp4hsacz8m
- SHA256 690eac2fe0613a1308ae43e3d0ea7229b44849f95e41ca30b75e776ca247ad2d
- MD5 927ad8466519c0b6f73b11c9b7c3d30c
- SHA1 fbaa0bbd693b061cf04340394a6798cbe00d0772
- SHA512 e520e4a4364e15554f70cc67f4f2c492c7ae24e37f26279518a33f2de28d34de7920add81c30e59b571bfb8f87a2513375dfb575d758a386eb1ce3feb6d41ab9
- SSDEEP 196608:6D5mxCN3BH2ZV5Q8tZT4KOreJXgpjMWMDowjyrTQh1PRolfsucWx:69m8SZU8DKreJxWM4Ti1PaBBx
- TLSH T103070126B2D511B9E0BA4639C972C171DA337C116A21CB4F17E06D5FBF372A06E3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-06_927ad8466519c0b6f73b11c9b7c3d30c_cobalt-strike_darkgate_gcleaner_glassworm_icedid_luca-st.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_927ad8466519c0b6f73b11c9b7c3d30c_cobalt-strike_darkgate_gcleaner_glassworm_icedid_luca-st.exe
Resource
win11ltsc2024-20260706-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_927ad8466519c0b6f73b11c9b7c3d30c_cobalt-strike_darkgate_gcleaner_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 16.8MB
- SHA256 690eac2fe0613a1308ae43e3d0ea7229b44849f95e41ca30b75e776ca247ad2d
- MD5 927ad8466519c0b6f73b11c9b7c3d30c
- SHA1 fbaa0bbd693b061cf04340394a6798cbe00d0772
- SHA512 e520e4a4364e15554f70cc67f4f2c492c7ae24e37f26279518a33f2de28d34de7920add81c30e59b571bfb8f87a2513375dfb575d758a386eb1ce3feb6d41ab9
- SSDEEP 196608:6D5mxCN3BH2ZV5Q8tZT4KOreJXgpjMWMDowjyrTQh1PRolfsucWx:69m8SZU8DKreJxWM4Ti1PaBBx
- TLSH T103070126B2D511B9E0BA4639C972C171DA337C116A21CB4F17E06D5FBF372A06E3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Reflective DLL injection artifacts
-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Adds Run key to start application