General
- Target 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom
- Size 6.7MB
- Sample260708-e4xpwsay7v
- SHA256 f25d1ab25548f7393ea3cd05c3176eb2a9f852bbe7c168cbd3794114b40b4de8
- MD5 78ac69a1508d46cdf858ade75d641423
- SHA1 69c559fdc9999443e9bf76eccf5af64eb75d26a2
- SHA512 13bf42b84b2de224620bcbb03fb948a749c63192266e5afe50746505786f75a107d4ef625a35386d581e3dc2e1410451357e656a69fc6132b7250eb3628833d4
- SSDEEP 49152:JKH0oSg2ui++1XOWUTw2MmWai7w/OgOcUnVx/cUUdIBpmtBVpvy+OUkpVuXLPlYo:JUdSVx03pvDv
- TLSH T17466BF725206BCEAE2274E7480412702DC783C6B573492EBBACC46D77BA76D09D7E970
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom
- Size 6.7MB
- SHA256 f25d1ab25548f7393ea3cd05c3176eb2a9f852bbe7c168cbd3794114b40b4de8
- MD5 78ac69a1508d46cdf858ade75d641423
- SHA1 69c559fdc9999443e9bf76eccf5af64eb75d26a2
- SHA512 13bf42b84b2de224620bcbb03fb948a749c63192266e5afe50746505786f75a107d4ef625a35386d581e3dc2e1410451357e656a69fc6132b7250eb3628833d4
- SSDEEP 49152:JKH0oSg2ui++1XOWUTw2MmWai7w/OgOcUnVx/cUUdIBpmtBVpvy+OUkpVuXLPlYo:JUdSVx03pvDv
- TLSH T17466BF725206BCEAE2274E7480412702DC783C6B573492EBBACC46D77BA76D09D7E970
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.