2026-07-14_8f9db594f85b43973bc383bf6cfedcc6_cobalt-strike_glassworm_icedid_njrat_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-14_8f9db594f85b43973bc383bf6cfedcc6_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
Size 8.3MB
Sample260714-d22qdsdv2l
SHA256 0c6e05fe8ffc5a57916d471c7f11eafee856036b3bea7d892fe048dcb508117d
MD5 8f9db594f85b43973bc383bf6cfedcc6
SHA1 a0ffd9219664fd36b8a477f3e1bc115e733d8501
SHA512 5269d7328e15c8eeba9908f74e8547cceb9c2d79785aa5f8b5fd6f280a913d26f8925c153d3605087b5800a90419e93f17c1a858e40ebc7efa39b4ced7bf99a3
SSDEEP 98304:qj1ZAxOCU3yUetDvB6ti3FOU8jRdqY9d2omTt20+NEZ:GAxOCU3yUetDvB6ti1aOTtlcEZ
TLSH
T1F496B033A2A3A4FDD028C830D297572A6D79744B4B30A5EFA5C412752F6BAE44D3CF61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-14_8f9db594f85b43973bc383bf6cfedcc6_cobalt-strike_glassworm_icedid_njrat_satacom_vidar

File Explorer

2026-07-14_8f9db594f85b43973bc383bf6cfedcc6_cobalt-strike_glassworm_icedid_njrat_satacom_vidar

.exe 8.3MB

2026-07-14_8f9db594f85b43973bc383bf6cfedcc6_cobalt-strike_glassworm_icedid_njrat_satacom_vidar

IMPHASH 9576feaee7c50f81d281a6149bed248d
SHA256 0c6e05fe8ffc5a57916d471c7f11eafee856036b3bea7d892fe048dcb508117d
MD5 8f9db594f85b43973bc383bf6cfedcc6
SHA1 a0ffd9219664fd36b8a477f3e1bc115e733d8501
SHA512 5269d7328e15c8eeba9908f74e8547cceb9c2d79785aa5f8b5fd6f280a913d26f8925c153d3605087b5800a90419e93f17c1a858e40ebc7efa39b4ced7bf99a3
SSDEEP 98304:qj1ZAxOCU3yUetDvB6ti3FOU8jRdqY9d2omTt20+NEZ:GAxOCU3yUetDvB6ti1aOTtlcEZ
TLSH
T1F496B033A2A3A4FDD028C830D297572A6D79744B4B30A5EFA5C412752F6BAE44D3CF61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2503908

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\b\s\w\ir\x\w\sdk\out\ReleaseX64\dart_precompiled_runtime_product.exe.pdb

ole32

CoTaskMemFree CoTaskMemAlloc

iphlpapi

GetAdaptersAddresses

psapi

GetProcessMemoryInfo EnumProcessModules

ws2_32

socket WSARecv WSASend getsockopt WSAGetLastError WSASetLastError WSAIoctl closesocket setsockopt send recv ioctlsocket connect WSASocketW listen bind WSASendTo InetNtopW InetPtonW getnameinfo freeaddrinfo getaddrinfo getpeername getsockname WSAStartup WSAAddressToStringW ntohs htons gethostname WSARecvFrom shutdown

rpcrt4

UuidCreateSequential UuidToStringW RpcStringFreeW

shlwapi

UrlIsW PathCreateFromUrlW

advapi32

RegGetValueW

shell32

CommandLineToArgvW

dbghelp

SymCleanup SymInitialize SymSetOptions

bcrypt

BCryptGenRandom

crypt32

CertEnumCertificatesInStore CertFreeCertificateContext CertCloseStore CertOpenStore

kernel32

GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW HeapAlloc HeapFree GetCommandLineA GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread SystemTimeToFileTime TzSpecificLocalTimeToSystemTime CreatePipe DuplicateHandle EnumSystemLocalesW GetDriveTypeW ReadConsoleW RaiseException GetCPInfo GetStringTypeW LCMapStringEx DecodePointer EncodePointer FindFirstFileExW IsValidCodePage GetACP GetOEMCP SetEnvironmentVariableW GetProcessHeap HeapReAlloc GetFileSizeEx WriteConsoleW PeekNamedPipe GetTempPathW InitOnceExecuteOnce SetConsoleCtrlHandler GetConsoleOutputCP GetConsoleCP SetConsoleOutputCP SetConsoleCP GetStdHandle GetConsoleMode SetConsoleMode MultiByteToWideChar CreateFileW SetStdHandle CreateIoCompletionPort CancelIoEx CloseHandle WaitForSingleObject OpenThread GetFileType ReadFile PostQueuedCompletionStatus GetLastError WriteFile SetLastError ReadDirectoryChangesW GetQueuedCompletionStatus GetCurrentDirectoryW SetCurrentDirectoryW SetErrorMode SetUnhandledExceptionFilter GetSystemInfo GetUserDefaultLocaleName GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameW WideCharToMultiByte ExitProcess GetModuleHandleW GetProcAddress CreateProcessW CreateEventW WaitForMultipleObjects OpenProcess TerminateProcess GetCurrentProcessId GetCurrentProcess CreateNamedPipeW RegisterWaitForSingleObject UnregisterWait GetExitCodeProcess GetConsoleScreenBufferInfo LoadLibraryExW FreeLibrary LoadLibraryW FormatMessageA LocalFree VirtualAlloc VirtualFree VirtualProtect InitializeSRWLock AcquireSRWLockShared AcquireSRWLockExclusive ReleaseSRWLockShared ReleaseSRWLockExclusive TlsGetValue TlsAlloc TlsSetValue FindNextFileW FindFirstFileW GetFileInformationByHandle FindClose GetFileAttributesW CreateDirectoryW HeapSize RemoveDirectoryW MoveFileExW DeleteFileW SetFileAttributesW SetFilePointerEx SetEndOfFile FlushFileBuffers LockFileEx UnlockFileEx GetFullPathNameW CreateSymbolicLinkW CopyFileExW MoveFileW DeviceIoControl SetFileTime GetFinalPathNameByHandleW GetCurrentThreadId TryAcquireSRWLockExclusive InitializeCriticalSection InitializeConditionVariable DeleteCriticalSection EnterCriticalSection LeaveCriticalSection SleepConditionVariableCS WakeConditionVariable WakeAllConditionVariable FormatMessageW GetCommandLineW QueryPerformanceFrequency QueryPerformanceCounter GetSystemTimeAsFileTime Sleep GetCurrentThread SetThreadPriority TlsFree VirtualQuery SleepConditionVariableSRW GetTimeZoneInformation FileTimeToSystemTime GetTimeZoneInformationForYear SystemTimeToTzSpecificLocalTime GetLocaleInfoEx CreateFileA CreateFileMappingW MapViewOfFile UnmapViewOfFile InitializeCriticalSectionAndSpinCount SetEvent ResetEvent WaitForSingleObjectEx InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW InitOnceBeginInitialize InitializeCriticalSectionEx TryEnterCriticalSection InitOnceComplete FlsAlloc FlsGetValue FlsSetValue FlsFree

ntdll

RtlUnwindEx RtlUnwind RtlPcToFileHeader

Dart_AddSymbols Dart_Allocate Dart_AllocateWithNativeFields Dart_BooleanValue Dart_ClassLibrary Dart_ClassName Dart_Cleanup Dart_CloseNativePort Dart_ClosureFunction Dart_CompileAll Dart_CompileToKernel Dart_CopyUTF8EncodingOfString Dart_CreateAppAOTSnapshotAsAssemblies Dart_CreateAppAOTSnapshotAsAssembly Dart_CreateAppAOTSnapshotAsElf Dart_CreateAppAOTSnapshotAsElfs Dart_CreateAppJITSnapshotAsBlobs Dart_CreateCoreJITSnapshotAsBlobs Dart_CreateIsolateGroup Dart_CreateIsolateGroupFromKernel Dart_CreateIsolateInGroup Dart_CreateSnapshot Dart_CreateVMAOTSnapshotAsAssembly Dart_CurrentIsolate Dart_CurrentIsolateData Dart_CurrentIsolateGroup Dart_CurrentIsolateGroupData Dart_CurrentIsolateGroupId Dart_DebugName Dart_DebugNameToCString Dart_DefaultCanonicalizeUrl Dart_DeferredLoadComplete Dart_DeferredLoadCompleteError Dart_DeleteFinalizableHandle Dart_DeletePersistentHandle Dart_DeleteWeakPersistentHandle Dart_DetectNullSafety Dart_DisableHeapSampling Dart_DoubleValue Dart_DumpNativeStackTrace Dart_EmptyString Dart_EnableHeapSampling Dart_EnterIsolate Dart_EnterScope Dart_ErrorGetException Dart_ErrorGetStackTrace Dart_ErrorHasException Dart_ExecuteInternalCommand Dart_ExitIsolate Dart_ExitScope Dart_False Dart_FinalizeAllClasses Dart_FinalizeLoading Dart_FunctionIsStatic Dart_FunctionName Dart_FunctionOwner Dart_GetClass Dart_GetCurrentUserTag Dart_GetDataFromByteBuffer Dart_GetDefaultUserTag Dart_GetError Dart_GetField Dart_GetLoadedLibraries Dart_GetMainPortId Dart_GetMessageNotifyCallback Dart_GetNativeArgument Dart_GetNativeArgumentCount Dart_GetNativeArguments Dart_GetNativeBooleanArgument Dart_GetNativeDoubleArgument Dart_GetNativeFieldsOfArgument Dart_GetNativeInstanceField Dart_GetNativeInstanceFieldCount Dart_GetNativeIntegerArgument Dart_GetNativeIsolateGroupData Dart_GetNativeReceiver Dart_GetNativeResolver Dart_GetNativeStringArgument Dart_GetNativeSymbol Dart_GetNonNullableType Dart_GetNullableType Dart_GetObfuscationMap Dart_GetPeer Dart_GetStaticMethodClosure Dart_GetStickyError Dart_GetType Dart_GetTypeOfExternalTypedData Dart_GetTypeOfTypedData Dart_GetUserTagLabel Dart_HandleFromPersistent Dart_HandleFromWeakPersistent Dart_HandleMessage Dart_HandleServiceMessages Dart_HasLivePorts Dart_HasServiceMessages Dart_HasStickyError Dart_IdentityEquals Dart_Initialize Dart_InstanceGetType Dart_IntegerFitsIntoInt64 Dart_IntegerFitsIntoUint64 Dart_IntegerToHexCString Dart_IntegerToInt64 Dart_IntegerToUint64 Dart_Invoke Dart_InvokeClosure Dart_InvokeConstructor Dart_InvokeVMServiceMethod Dart_IsApiError Dart_IsBoolean Dart_IsByteBuffer Dart_IsClosure Dart_IsCompilationError Dart_IsDouble Dart_IsError Dart_IsExternalString Dart_IsFatalError Dart_IsFunction Dart_IsFuture Dart_IsInstance Dart_IsInteger Dart_IsKernel Dart_IsKernelIsolate Dart_IsLegacyType Dart_IsLibrary Dart_IsList Dart_IsMap Dart_IsNonNullableType Dart_IsNull Dart_IsNullableType Dart_IsNumber Dart_IsPausedOnExit Dart_IsPausedOnStart Dart_IsPrecompiledRuntime Dart_IsReloading Dart_IsServiceIsolate Dart_IsString Dart_IsStringLatin1 Dart_IsTearOff Dart_IsType Dart_IsTypeVariable Dart_IsTypedData Dart_IsUnhandledExceptionError Dart_IsVMFlagSet Dart_IsVariable Dart_IsolateData Dart_IsolateFlagsInitialize Dart_IsolateGroupData Dart_IsolateGroupHeapNewCapacityMetric Dart_IsolateGroupHeapNewExternalMetric Dart_IsolateGroupHeapNewUsedMetric Dart_IsolateGroupHeapOldCapacityMetric Dart_IsolateGroupHeapOldExternalMetric Dart_IsolateGroupHeapOldUsedMetric Dart_IsolateMakeRunnable Dart_IsolateRunnableHeapSizeMetric Dart_IsolateRunnableLatencyMetric Dart_IsolateServiceId Dart_KernelIsolateIsRunning Dart_KernelListDependencies Dart_KernelPort Dart_KillIsolate Dart_LibraryHandleError Dart_LibraryResolvedUrl Dart_LibraryUrl Dart_ListGetAsBytes Dart_ListGetAt Dart_ListGetRange Dart_ListLength Dart_ListSetAsBytes Dart_ListSetAt Dart_LoadELF Dart_LoadELF_Memory Dart_LoadLibrary Dart_LoadLibraryFromKernel Dart_LoadScriptFromKernel Dart_LoadingUnitLibraryUris Dart_LookupLibrary Dart_MapContainsKey Dart_MapGetAt Dart_MapKeys Dart_New Dart_NewApiError Dart_NewBoolean Dart_NewByteBuffer Dart_NewCompilationError Dart_NewDouble Dart_NewExternalLatin1String Dart_NewExternalTypedData Dart_NewExternalTypedDataWithFinalizer Dart_NewExternalUTF16String Dart_NewFinalizableHandle Dart_NewInteger Dart_NewIntegerFromHexCString Dart_NewIntegerFromUint64 Dart_NewList Dart_NewListOf Dart_NewListOfType Dart_NewListOfTypeFilled Dart_NewNativePort Dart_NewPersistentHandle Dart_NewSendPort Dart_NewStringFromCString Dart_NewStringFromUTF16 Dart_NewStringFromUTF32 Dart_NewStringFromUTF8 Dart_NewTypedData Dart_NewUnhandledExceptionError Dart_NewUnmodifiableExternalTypedDataWithFinalizer Dart_NewUserTag Dart_NewWeakPersistentHandle Dart_NotifyDestroyed Dart_NotifyIdle Dart_NotifyLowMemory Dart_Null Dart_ObjectEquals Dart_ObjectIsType Dart_Post Dart_PostCObject Dart_PostInteger Dart_Precompile Dart_PrepareToAbort Dart_PropagateError Dart_ReThrowException Dart_RecordTimelineEvent Dart_RegisterHeapSamplingCallback Dart_RegisterIsolateServiceRequestCallback Dart_RegisterRootServiceRequestCallback Dart_ReportSurvivingAllocations Dart_RootLibrary Dart_RunLoop Dart_RunLoopAsync Dart_ScopeAllocate Dart_SendPortGetId Dart_ServiceSendDataEvent Dart_SetBooleanReturnValue Dart_SetCurrentUserTag Dart_SetDartLibrarySourcesKernel Dart_SetDeferredLoadHandler Dart_SetDoubleReturnValue Dart_SetDwarfStackTraceFootnoteCallback Dart_SetEmbedderInformationCallback Dart_SetEnabledTimelineCategory Dart_SetEnvironmentCallback Dart_SetFfiNativeResolver Dart_SetField Dart_SetFileModifiedCallback Dart_SetHeapSamplingPeriod Dart_SetIntegerReturnValue Dart_SetLibraryTagHandler Dart_SetMessageNotifyCallback Dart_SetNativeInstanceField Dart_SetNativeResolver Dart_SetPausedOnExit Dart_SetPausedOnStart Dart_SetPeer Dart_SetPerformanceMode Dart_SetPersistentHandle Dart_SetReturnValue Dart_SetRootLibrary Dart_SetServiceStreamCallbacks Dart_SetShouldPauseOnExit Dart_SetShouldPauseOnStart Dart_SetStickyError Dart_SetThreadName Dart_SetTimelineRecorderCallback Dart_SetVMFlags Dart_SetWeakHandleReturnValue Dart_ShouldPauseOnExit Dart_ShouldPauseOnStart Dart_ShutdownIsolate Dart_SortClasses Dart_StartProfiling Dart_StopProfiling Dart_StringGetProperties Dart_StringLength Dart_StringStorageSize Dart_StringToCString Dart_StringToLatin1 Dart_StringToUTF16 Dart_StringToUTF8 Dart_StringUTF8Length Dart_ThreadDisableProfiling Dart_ThreadEnableProfiling Dart_ThrowException Dart_TimelineEvent Dart_TimelineGetMicros Dart_TimelineGetTicks Dart_TimelineGetTicksFrequency Dart_ToString Dart_True Dart_TypeDynamic Dart_TypeNever Dart_TypeToNonNullableType Dart_TypeToNullableType Dart_TypeVoid Dart_TypedDataAcquireData Dart_TypedDataReleaseData Dart_UnloadELF Dart_VersionString Dart_WaitForEvent Dart_WriteHeapSnapshot Dart_WriteProfileToTimeline

Name

.text

Size

2.6MB

Virtual Size

2.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

82KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

40KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

snapshot

Size

4.5MB

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-14_8f9db594f85b43973bc383bf6cfedcc6_cobalt-strike_glassworm_icedid_njrat_satacom_vidar

ole32

iphlpapi

psapi

ws2_32

rpcrt4

shlwapi

advapi32

shell32

dbghelp

bcrypt

crypt32

kernel32

ntdll

generic