General
- Target 2026-07-11_c714e6c8c69fdb31d4a614b6bb98ffb6_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 2.4MB
- Sample260711-spa48sfs8w
- SHA256 31d2e652716e8f29a11b42ed020b0c5b204493e4f8ef0373bd8be98b7d048bb8
- MD5 c714e6c8c69fdb31d4a614b6bb98ffb6
- SHA1 d9b4df0e359f4e3c1a21bb17fba34351fbb2a3ac
- SHA512 989fc74a93155a4b0193ecda801275a12eea63404160c80b6295122d2686112fbc7b1df1728352a017d666ee7ec4fc73b5fec7493ed70732ebee64e28ad11cbd
- SSDEEP 49152:N6TK3ywY82fF3ofDw29rw4P2IorozM0gN/WP2KNG5O5t6OTwYFc5cLN:NatfFsxw4P2DozPG/o2KF5tJ9+cL
- TLSH T1E0C5231563A108F9E8B54239C843C53AE6B2BC260360D5DF07E85E6B6F636E11D7BB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-11_c714e6c8c69fdb31d4a614b6bb98ffb6_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_c714e6c8c69fdb31d4a614b6bb98ffb6_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
ValoGenPremium.pyc
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
ValoGenPremium.pyc
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_c714e6c8c69fdb31d4a614b6bb98ffb6_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 2.4MB
- SHA256 31d2e652716e8f29a11b42ed020b0c5b204493e4f8ef0373bd8be98b7d048bb8
- MD5 c714e6c8c69fdb31d4a614b6bb98ffb6
- SHA1 d9b4df0e359f4e3c1a21bb17fba34351fbb2a3ac
- SHA512 989fc74a93155a4b0193ecda801275a12eea63404160c80b6295122d2686112fbc7b1df1728352a017d666ee7ec4fc73b5fec7493ed70732ebee64e28ad11cbd
- SSDEEP 49152:N6TK3ywY82fF3ofDw29rw4P2IorozM0gN/WP2KNG5O5t6OTwYFc5cLN:NatfFsxw4P2DozPG/o2KF5tJ9+cL
- TLSH T1E0C5231563A108F9E8B54239C843C53AE6B2BC260360D5DF07E85E6B6F636E11D7BB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Downloads MZ/PE file
-
Executes dropped EXE
-
- Target ValoGenPremium.pyc
- Size 16B
- SHA256 707195db9737c31733674b9786c611675f3e86afc3f8236be35cb8ffc6eceb38
- MD5 b9b66f803efb8c145a0b78bf768ffcde
- SHA1 071f91f6bd8b0b476134e2043b48b78230003215
- SHA512 9d02dfd0d5ca5477a755f3b8fdc10475b8737ecd667428cad5dd600fbe27c2c0ba1fd98b98d69663dadecd05b3138295a8dba608990c8846a9963289a47db639
- MD5 SHA1 SHA512
Score3/10