General
- Target 2026-07-09_23da2cccbe1f67876bbff73a5c70f1af_cobalt-strike_glassworm_icedid_njrat_stealc
- Size 372KB
- Sample260709-p98z8ab141
- SHA256 5810a376aa5ae0c66d21fdaed944147c2549d4f8e518fcb8bf8d7b0c49e5778c
- MD5 23da2cccbe1f67876bbff73a5c70f1af
- SHA1 a20cfbd627f57ac8b0b7663f307c04e59aca8977
- SHA512 346f766ef42b7eb24828ec767b23b6706cbac7517512aabba8a32a37da891fa506c6f29509511ced7310f50454d0e43f691eaa549bb39a6d03214ea6fb60ab42
- SSDEEP 6144:nvIbElrjug3GFHlYQW3GoddUe38ovU5Aww/prxVdZ/:nt8YQWD38ovYFwJ//
- TLSH T167846C19FBA400F9E1B7C278CD634506EA727C8A0775EADF23954A5A0F236D09E3D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_23da2cccbe1f67876bbff73a5c70f1af_cobalt-strike_glassworm_icedid_njrat_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_23da2cccbe1f67876bbff73a5c70f1af_cobalt-strike_glassworm_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_23da2cccbe1f67876bbff73a5c70f1af_cobalt-strike_glassworm_icedid_njrat_stealc
- Size 372KB
- SHA256 5810a376aa5ae0c66d21fdaed944147c2549d4f8e518fcb8bf8d7b0c49e5778c
- MD5 23da2cccbe1f67876bbff73a5c70f1af
- SHA1 a20cfbd627f57ac8b0b7663f307c04e59aca8977
- SHA512 346f766ef42b7eb24828ec767b23b6706cbac7517512aabba8a32a37da891fa506c6f29509511ced7310f50454d0e43f691eaa549bb39a6d03214ea6fb60ab42
- SSDEEP 6144:nvIbElrjug3GFHlYQW3GoddUe38ovU5Aww/prxVdZ/:nt8YQWD38ovYFwJ//
- TLSH T167846C19FBA400F9E1B7C278CD634506EA727C8A0775EADF23954A5A0F236D09E3D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.