General
- Target 2026-07-11_c18ae7f73445f1de8aeb3e7fefdcbb50_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 17.1MB
- Sample260711-dapazsax3p
- SHA256 1ae777c2df9958fce563dd82649b198f23231851b5ad9794fd4eab7707745d04
- MD5 c18ae7f73445f1de8aeb3e7fefdcbb50
- SHA1 a326bd1e53a11f3eb80c2a37cc4f24ef9edc0f7f
- SHA512 eb45e8a54c958f7b8b6317f75235650c15f25c0be43af1fd41bb6081b597a534a989ac6cee2351e8ee7d5703350b1cdd32b30a62ad1ca10cf789bffdd5ec270b
- SSDEEP 98304:xDCibVb7ozbMsdDquUWKpy3o0TksGXQX2isKq8wJX9ulnTrdntWkmzAcelK9411K:xDCUb7ApUo3o0TPGXQXtpl9TQzcQgo
- TLSH T12C074A06B361C465D41A82388DD7C7AAAB717C91CF2283C736E5B36E1E377D12EB6601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_c18ae7f73445f1de8aeb3e7fefdcbb50_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_c18ae7f73445f1de8aeb3e7fefdcbb50_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_c18ae7f73445f1de8aeb3e7fefdcbb50_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 17.1MB
- SHA256 1ae777c2df9958fce563dd82649b198f23231851b5ad9794fd4eab7707745d04
- MD5 c18ae7f73445f1de8aeb3e7fefdcbb50
- SHA1 a326bd1e53a11f3eb80c2a37cc4f24ef9edc0f7f
- SHA512 eb45e8a54c958f7b8b6317f75235650c15f25c0be43af1fd41bb6081b597a534a989ac6cee2351e8ee7d5703350b1cdd32b30a62ad1ca10cf789bffdd5ec270b
- SSDEEP 98304:xDCibVb7ozbMsdDquUWKpy3o0TksGXQX2isKq8wJX9ulnTrdntWkmzAcelK9411K:xDCUb7ApUo3o0TPGXQXtpl9TQzcQgo
- TLSH T12C074A06B361C465D41A82388DD7C7AAAB717C91CF2283C736E5B36E1E377D12EB6601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE