General
- Target 2026-07-11_94afe1896f25db4bb42bccf29799bb38_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 17.1MB
- Sample260711-deandsax8p
- SHA256 b78034c79802bfaf09663c3d02be6c22410efce1ebf987da2581a97a8b777893
- MD5 94afe1896f25db4bb42bccf29799bb38
- SHA1 00dd5c96ca2282e39e00d19d39f413f4fe621a65
- SHA512 1c686e382f57775ac22b7213feda59411eae647d387291894130100a9707591f1d97eef0a9532cb89f6737c8b8c2a336cc1dc86da0f0e27db30b72a51b40602d
- SSDEEP 98304:xDCibVb7ozbMsdDquUWKpy3o0TksGXQX2isKq8wJX9ulnTrdntWkmzAcelK94113:xDCUb7ApUo3o0TPGXQXtpl9TQzcQgx
- TLSH T1D9074A06B361C465D41A82388DD7C7AAAB717C91CF2283C736E5B36E1E377D12EB6601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_94afe1896f25db4bb42bccf29799bb38_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_94afe1896f25db4bb42bccf29799bb38_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_94afe1896f25db4bb42bccf29799bb38_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 17.1MB
- SHA256 b78034c79802bfaf09663c3d02be6c22410efce1ebf987da2581a97a8b777893
- MD5 94afe1896f25db4bb42bccf29799bb38
- SHA1 00dd5c96ca2282e39e00d19d39f413f4fe621a65
- SHA512 1c686e382f57775ac22b7213feda59411eae647d387291894130100a9707591f1d97eef0a9532cb89f6737c8b8c2a336cc1dc86da0f0e27db30b72a51b40602d
- SSDEEP 98304:xDCibVb7ozbMsdDquUWKpy3o0TksGXQX2isKq8wJX9ulnTrdntWkmzAcelK94113:xDCUb7ApUo3o0TPGXQXtpl9TQzcQgx
- TLSH T1D9074A06B361C465D41A82388DD7C7AAAB717C91CF2283C736E5B36E1E377D12EB6601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE