General
- Target 2026-07-06_18635d673321ef52efa548a87726ac23_cobalt-strike_glassworm_icedid_luca-stealer_njrat
- Size 223KB
- Sample260707-ftddyaat8z
- SHA256 7fc3038cff29dee4af349cae06ba605ca89c70b84e161f27f6d945291d58e8d2
- MD5 18635d673321ef52efa548a87726ac23
- SHA1 74699fd0ba8e42795953ed6f7e658a4e60e069c4
- SHA512 1da62aeb4cffb98a3615a5364c6266ffb012e5f2bab50aca3fc44b65f75078f53978dd46e368c4641f01c82bf8132aeaa1c49ce2a374fc2bf5e864c0894e9890
- SSDEEP 3072:jR5bGa3Z3mgGD863pFYAT2GJzxlVUXEAgO3eWYpXWZnvnLdDLOna0ZIO79Qy:jTbGcZGNpSAx7lbAygU2i9Q
- TLSH T160248D5577A50CF9E8778239C8938616EA727C461330DAEF03B04666AF237E09D3E761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-06_18635d673321ef52efa548a87726ac23_cobalt-strike_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-07-06_18635d673321ef52efa548a87726ac23_cobalt-strike_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target 2026-07-06_18635d673321ef52efa548a87726ac23_cobalt-strike_glassworm_icedid_luca-stealer_njrat
- Size 223KB
- SHA256 7fc3038cff29dee4af349cae06ba605ca89c70b84e161f27f6d945291d58e8d2
- MD5 18635d673321ef52efa548a87726ac23
- SHA1 74699fd0ba8e42795953ed6f7e658a4e60e069c4
- SHA512 1da62aeb4cffb98a3615a5364c6266ffb012e5f2bab50aca3fc44b65f75078f53978dd46e368c4641f01c82bf8132aeaa1c49ce2a374fc2bf5e864c0894e9890
- SSDEEP 3072:jR5bGa3Z3mgGD863pFYAT2GJzxlVUXEAgO3eWYpXWZnvnLdDLOna0ZIO79Qy:jTbGcZGNpSAx7lbAygU2i9Q
- TLSH T160248D5577A50CF9E8778239C8938616EA727C461330DAEF03B04666AF237E09D3E761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Windows security bypass
-
Modifies Windows Firewall
-
Drops startup file
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Scheduled Task/Job
1Scheduled Task
1Defense Evasion
Impair Defenses
2Disable or Modify System Firewall
1Disable or Modify Tools
1Modify Registry
2