General
- Target 2026-07-09_cedae9f89f3bff5ad5ba832d386d7eb2_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 12.6MB
- Sample260709-b9ngmacv3y
- SHA256 48aad544202615e936d50ba87b997653827568c6d98d4593c230181789bdb949
- MD5 cedae9f89f3bff5ad5ba832d386d7eb2
- SHA1 b33b65ec7804bc3f160f856f7e2e9f9f2a65e15e
- SHA512 070bfff8029c9d68c84ec94360d280fa6e28ff2e1f331b525e666057e4f84e2475bdbadfa0b69af41b7ae1cd8c0081956d6303dab239d20843d28345ac487eae
- SSDEEP 196608:rmHpn6F4QIAWvFDOkdwhVWMXtpqRwdJLQvYUi/b42FY:rmHN6+RrvFakWHXj7QvYUiTdFY
- TLSH T1C2D6CFA562E720FDE0AFE179893A8732E6B17C130131530F167CD6562FA36686D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_cedae9f89f3bff5ad5ba832d386d7eb2_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_cedae9f89f3bff5ad5ba832d386d7eb2_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260706-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_cedae9f89f3bff5ad5ba832d386d7eb2_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 12.6MB
- SHA256 48aad544202615e936d50ba87b997653827568c6d98d4593c230181789bdb949
- MD5 cedae9f89f3bff5ad5ba832d386d7eb2
- SHA1 b33b65ec7804bc3f160f856f7e2e9f9f2a65e15e
- SHA512 070bfff8029c9d68c84ec94360d280fa6e28ff2e1f331b525e666057e4f84e2475bdbadfa0b69af41b7ae1cd8c0081956d6303dab239d20843d28345ac487eae
- SSDEEP 196608:rmHpn6F4QIAWvFDOkdwhVWMXtpqRwdJLQvYUi/b42FY:rmHN6+RrvFakWHXj7QvYUiTdFY
- TLSH T1C2D6CFA562E720FDE0AFE179893A8732E6B17C130131530F167CD6562FA36686D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.