Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
08/07/2026, 04:30
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
General
- Target 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe
- Size 6.7MB
- Sample260708-e4xpwsay7v
- SHA256 f25d1ab25548f7393ea3cd05c3176eb2a9f852bbe7c168cbd3794114b40b4de8
- MD5 78ac69a1508d46cdf858ade75d641423
- SHA1 69c559fdc9999443e9bf76eccf5af64eb75d26a2
- SHA512 13bf42b84b2de224620bcbb03fb948a749c63192266e5afe50746505786f75a107d4ef625a35386d581e3dc2e1410451357e656a69fc6132b7250eb3628833d4
- SSDEEP 49152:JKH0oSg2ui++1XOWUTw2MmWai7w/OgOcUnVx/cUUdIBpmtBVpvy+OUkpVuXLPlYo:JUdSVx03pvDv
- TLSH T17466BF725206BCEAE2274E7480412702DC783C6B573492EBBACC46D77BA76D09D7E970
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe 2436 2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-08_78ac69a1508d46cdf858ade75d641423_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2436