General
- Target 2026-07-08_f585d3c98cf31aaa6afe61db2c607b61_cobalt-strike_glassworm_icedid_njrat_stealc
- Size 3.6MB
- Sample260708-el5yjsa18n
- SHA256 9d635814fd0992c19947b780e21a11872624860359651f65a68e7c1dc35f4054
- MD5 f585d3c98cf31aaa6afe61db2c607b61
- SHA1 228955f0b11ea2f73944adf86f8fb86737bd28a6
- SHA512 3754dc5eb491376b02aff87466eb4dab48db605dfe41992dec2d28994b51261d3277ece22c92c242c9ab1030d89cd6426f06fcd63b3d374912c0d2d5eff27cb9
- SSDEEP 49152:6ZtcHmSy1jtXa3x/uYBKWP8Flfl1ygIyg+xlJsv6tWKFdu9CePTvG70pHFhh6DhK:gMSw0fk+Jsv6tWKFdu9CeiC
- TLSH T14A067D86B1B55264D5B3C13486A39D1AE67378028F705ADF125AB71FDAB36F00E3B318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_f585d3c98cf31aaa6afe61db2c607b61_cobalt-strike_glassworm_icedid_njrat_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_f585d3c98cf31aaa6afe61db2c607b61_cobalt-strike_glassworm_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260706-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_f585d3c98cf31aaa6afe61db2c607b61_cobalt-strike_glassworm_icedid_njrat_stealc
- Size 3.6MB
- SHA256 9d635814fd0992c19947b780e21a11872624860359651f65a68e7c1dc35f4054
- MD5 f585d3c98cf31aaa6afe61db2c607b61
- SHA1 228955f0b11ea2f73944adf86f8fb86737bd28a6
- SHA512 3754dc5eb491376b02aff87466eb4dab48db605dfe41992dec2d28994b51261d3277ece22c92c242c9ab1030d89cd6426f06fcd63b3d374912c0d2d5eff27cb9
- SSDEEP 49152:6ZtcHmSy1jtXa3x/uYBKWP8Flfl1ygIyg+xlJsv6tWKFdu9CePTvG70pHFhh6DhK:gMSw0fk+Jsv6tWKFdu9CeiC
- TLSH T14A067D86B1B55264D5B3C13486A39D1AE67378028F705ADF125AB71FDAB36F00E3B318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.