General
- Target 2026-07-12_1c77c5106bf0f78eade001abccaf783d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_ryuk_satacom_stealc_vidar_xworm
- Size 2.9MB
- Sample260712-rfekmabs8r
- SHA256 e401b7d063fa7c442e33fc7780aa2c324f517b5276f41143895142132a1fc679
- MD5 1c77c5106bf0f78eade001abccaf783d
- SHA1 ff2d45c882d922197aac2fd170253fd754c25dc4
- SHA512 43962bb5186d777cf735ca4cba3405d8d3dce77d3be03a188f3534dd0b1b8cef776a8f48d27f4aa05baaa21871abf513ccbea8971f1c23c62ca13a703c867cbf
- SSDEEP 49152:Do5AlTWOocGdDOxL9TXyTtsBP/OlsLzFmNfW6FJKxxfZA4XQ:QDe1XzBP/OlsLzFmNfW6FJKxxfZA4XQ
- TLSH T19FD507CABE5072F6D19CD8387457727DD6637C796F228A8F2297FF1E1A33260492A101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-12_1c77c5106bf0f78eade001abccaf783d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_ryuk_s.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_1c77c5106bf0f78eade001abccaf783d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_ryuk_s.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_1c77c5106bf0f78eade001abccaf783d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_ryuk_satacom_stealc_vidar_xworm
- Size 2.9MB
- SHA256 e401b7d063fa7c442e33fc7780aa2c324f517b5276f41143895142132a1fc679
- MD5 1c77c5106bf0f78eade001abccaf783d
- SHA1 ff2d45c882d922197aac2fd170253fd754c25dc4
- SHA512 43962bb5186d777cf735ca4cba3405d8d3dce77d3be03a188f3534dd0b1b8cef776a8f48d27f4aa05baaa21871abf513ccbea8971f1c23c62ca13a703c867cbf
- SSDEEP 49152:Do5AlTWOocGdDOxL9TXyTtsBP/OlsLzFmNfW6FJKxxfZA4XQ:QDe1XzBP/OlsLzFmNfW6FJKxxfZA4XQ
- TLSH T19FD507CABE5072F6D19CD8387457727DD6637C796F228A8F2297FF1E1A33260492A101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association