General
- Target 2026-07-11_2e6bb27bef13f3991c015c6f0c87eec8_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 7.2MB
- Sample260711-vb4kqsfv3p
- SHA256 c87fa71ad7febab1ca4998c3e78f2bb09760acdb8402da260478538d845c71ca
- MD5 2e6bb27bef13f3991c015c6f0c87eec8
- SHA1 1caaa1553d6488d7f7c9ac6a56e19e1ef09ffde4
- SHA512 c862957b8f82adbe6615ced368103fd342b348fce9cd5ba9ec54346ec45d7ad5444e5787b65fe6ca710d776eea2d3adec864f0480e556b8357dcc618edcfe2cd
- SSDEEP 196608:gHF3GxbAQv3wejuJDUX47dwdW0LBJ1LJHDXYPAZ9Q0:wFWxfaUX47d4JVZ93
- TLSH T1477633E862F009E6DC68D239D1828941A772BC270774D7CF037495671F73AE5983BB2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-11_2e6bb27bef13f3991c015c6f0c87eec8_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_2e6bb27bef13f3991c015c6f0c87eec8_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_2e6bb27bef13f3991c015c6f0c87eec8_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 7.2MB
- SHA256 c87fa71ad7febab1ca4998c3e78f2bb09760acdb8402da260478538d845c71ca
- MD5 2e6bb27bef13f3991c015c6f0c87eec8
- SHA1 1caaa1553d6488d7f7c9ac6a56e19e1ef09ffde4
- SHA512 c862957b8f82adbe6615ced368103fd342b348fce9cd5ba9ec54346ec45d7ad5444e5787b65fe6ca710d776eea2d3adec864f0480e556b8357dcc618edcfe2cd
- SSDEEP 196608:gHF3GxbAQv3wejuJDUX47dwdW0LBJ1LJHDXYPAZ9Q0:wFWxfaUX47d4JVZ93
- TLSH T1477633E862F009E6DC68D239D1828941A772BC270774D7CF037495671F73AE5983BB2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application