General
- Target 2026-05-10_eae0abf6170e2fe4e77deda9358bce0a_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 97.1MB
- Sample260709-w16basgw7v
- SHA256 fd23e69ab8ba68828d38b1fbecb0dab7cc29e70de302fde019dfe22738c251c2
- MD5 eae0abf6170e2fe4e77deda9358bce0a
- SHA1 296b6231abfaa31e54deffbe9bb3f7f0c782548e
- SHA512 f8c6eb2d194e0169655051e65de87da7113eff631e57560fc5e7c47d10cca8cae7c64c5519f85585863fa45d60ab744db1c3e9366ef8cc6cf62d7f130bb67bf6
- SSDEEP 393216:aSatY8L2Vmd6melh2pOc/e+7G99YP69/vtiCELWF:aSai8yVmdKQpOun69YcF
- TLSH T14828334053A006CAF7AA44338877C527EB75F85A5F978B4FC75C86600EB32AB5D71BA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-10_eae0abf6170e2fe4e77deda9358bce0a_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win11-20260513-en
4 signatures
900 seconds
Malware Config
Targets
-
- Target 2026-05-10_eae0abf6170e2fe4e77deda9358bce0a_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 97.1MB
- SHA256 fd23e69ab8ba68828d38b1fbecb0dab7cc29e70de302fde019dfe22738c251c2
- MD5 eae0abf6170e2fe4e77deda9358bce0a
- SHA1 296b6231abfaa31e54deffbe9bb3f7f0c782548e
- SHA512 f8c6eb2d194e0169655051e65de87da7113eff631e57560fc5e7c47d10cca8cae7c64c5519f85585863fa45d60ab744db1c3e9366ef8cc6cf62d7f130bb67bf6
- SSDEEP 393216:aSatY8L2Vmd6melh2pOc/e+7G99YP69/vtiCELWF:aSai8yVmdKQpOun69YcF
- TLSH T14828334053A006CAF7AA44338877C527EB75F85A5F978B4FC75C86600EB32AB5D71BA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Iris Stealer
Iris Stealer is an infostealer written in Python and packaged with PyInstaller.
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger