General
- Target 2026-07-07_353cb1f5f9a21c855fe8c2de9062867c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 3.8MB
- Sample260707-mrnkfsds4q
- SHA256 c6d11b014b182895b061f102299fca0fe8dc58b409cdca5a1d2338b8cc87766d
- MD5 353cb1f5f9a21c855fe8c2de9062867c
- SHA1 b38da2fb1b4dfc8c679e3ab8f9a97a67ee8a4117
- SHA512 68ff1f99810bdf45668335c33a00649d23174fa660dd65f2833ef864867ece56e81b9c251b14d4328f14857777559487f242f5683c90e49c6048c1b54e02bd4e
- SSDEEP 49152:EtfAtlOpj4jEn2zAFSqFH76T0LTbodzzbAgCtsnw99n76CN/j2U4FH:kAtlNbNqFGumzzOn76Sj2jF
- TLSH T1F7067C12A2EC0596D3E6A039DE56C51BEBB1B81C43F746F73050CAD92B27CD23A79B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_353cb1f5f9a21c855fe8c2de9062867c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_353cb1f5f9a21c855fe8c2de9062867c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 3.8MB
- SHA256 c6d11b014b182895b061f102299fca0fe8dc58b409cdca5a1d2338b8cc87766d
- MD5 353cb1f5f9a21c855fe8c2de9062867c
- SHA1 b38da2fb1b4dfc8c679e3ab8f9a97a67ee8a4117
- SHA512 68ff1f99810bdf45668335c33a00649d23174fa660dd65f2833ef864867ece56e81b9c251b14d4328f14857777559487f242f5683c90e49c6048c1b54e02bd4e
- SSDEEP 49152:EtfAtlOpj4jEn2zAFSqFH76T0LTbodzzbAgCtsnw99n76CN/j2U4FH:kAtlNbNqFGumzzOn76Sj2jF
- TLSH T1F7067C12A2EC0596D3E6A039DE56C51BEBB1B81C43F746F73050CAD92B27CD23A79B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1