General
- Target 2026-07-06_589f21243033581a99cd86d92a68a04d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_ryuk_satacom_stealc_vidar_xworm
- Size 4.6MB
- Sample260707-d71qaaes6l
- SHA256 1e0795683bb0afddfd81dbf2842e365c0f9c54ccfdb2fb7e34cf77de717306a8
- MD5 589f21243033581a99cd86d92a68a04d
- SHA1 6b823b5829c0de8a6002e1ae0dfae85520ff036b
- SHA512 9d50f278a36ad86dc340e2532e600c31ab9789242242a7f95bd13474d1b1a6b57dfb6564abd66df12fcd25971c93080322ff90b3a59e456fdd2c7c4da1543045
- SSDEEP 49152:DU/KCGZd0qgNEf16lhulJLirHJIZ/K0tDAy49uO7G6XSq4vFWVRxYOKKJY+lpStO:XWQtZ/K0tGOFWVRuLftCTf
- TLSH T128265B03F6E941E9E0AAD178CF3587219B327C5A8BF1A5DF225032D51E76AD07B38721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-06_589f21243033581a99cd86d92a68a04d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_ryuk_s.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_589f21243033581a99cd86d92a68a04d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_ryuk_s.exe
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_589f21243033581a99cd86d92a68a04d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_ryuk_satacom_stealc_vidar_xworm
- Size 4.6MB
- SHA256 1e0795683bb0afddfd81dbf2842e365c0f9c54ccfdb2fb7e34cf77de717306a8
- MD5 589f21243033581a99cd86d92a68a04d
- SHA1 6b823b5829c0de8a6002e1ae0dfae85520ff036b
- SHA512 9d50f278a36ad86dc340e2532e600c31ab9789242242a7f95bd13474d1b1a6b57dfb6564abd66df12fcd25971c93080322ff90b3a59e456fdd2c7c4da1543045
- SSDEEP 49152:DU/KCGZd0qgNEf16lhulJLirHJIZ/K0tDAy49uO7G6XSq4vFWVRxYOKKJY+lpStO:XWQtZ/K0tGOFWVRuLftCTf
- TLSH T128265B03F6E941E9E0AAD178CF3587219B327C5A8BF1A5DF225032D51E76AD07B38721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association