General
- Target 2026-07-06_5186c684f5ceef5ff3ef51bd4f234fed_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc
- Size 841KB
- Sample260707-eejfzahs8x
- SHA256 3ffd1e02e4f3bcb25bfe619234383431680bd52ed4e1eabb7cbea8ef6c7d18e9
- MD5 5186c684f5ceef5ff3ef51bd4f234fed
- SHA1 87b8b5e26c8ca67992d11ac680f3670ee0286f70
- SHA512 7d55d7c8c4db3557f6f3f7077b76fe02caf66deb3ff42029941c36664a2a3649f46f2ef7d400e93282f2f250f33b8ccb6171293b4416d2076f04b59f0db2046c
- SSDEEP 12288:Cpv3/MMt0zEQBdtkCHyBvDSBIDph0lhSMXl+pPIbwBxcBXA:Cv3k40zE2dtjHyBbkI1h0lhSMXlyPOvw
- TLSH T182058D2AEBA942F8D07BC178C992650AFAB27C5A436167CB039175672F336E05D3F701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-06_5186c684f5ceef5ff3ef51bd4f234fed_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_5186c684f5ceef5ff3ef51bd4f234fed_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_5186c684f5ceef5ff3ef51bd4f234fed_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc
- Size 841KB
- SHA256 3ffd1e02e4f3bcb25bfe619234383431680bd52ed4e1eabb7cbea8ef6c7d18e9
- MD5 5186c684f5ceef5ff3ef51bd4f234fed
- SHA1 87b8b5e26c8ca67992d11ac680f3670ee0286f70
- SHA512 7d55d7c8c4db3557f6f3f7077b76fe02caf66deb3ff42029941c36664a2a3649f46f2ef7d400e93282f2f250f33b8ccb6171293b4416d2076f04b59f0db2046c
- SSDEEP 12288:Cpv3/MMt0zEQBdtkCHyBvDSBIDph0lhSMXl+pPIbwBxcBXA:Cv3k40zE2dtjHyBbkI1h0lhSMXlyPOvw
- TLSH T182058D2AEBA942F8D07BC178C992650AFAB27C5A436167CB039175672F336E05D3F701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.