866622a866304014c771c5f91e1d21fb6a6e2ba9b0856bb2bb044e6af945fa47 | Triage™

Login
Reports

Overview

overview

9

Static

static

3

2026-07-14...lc.exe

windows10-2004-x64

9

2026-07-14...lc.exe

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-14_adf8263788b268d3d67668f8c53db48c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
Size 1.7MB
Sample260714-dskqhsfv2v
SHA256 866622a866304014c771c5f91e1d21fb6a6e2ba9b0856bb2bb044e6af945fa47
MD5 adf8263788b268d3d67668f8c53db48c
SHA1 c78463e665d1fa9a5dffab4dc143521356779982
SHA512 533e8d14bee9d6bcf9bb224b02d008ff6724e3a3a63b10c794aad03d855f1d3f23a9fc449f75b4f7ec58659b84b3af99721af887201704c296b1616d5fd08053
SSDEEP 24576:Z/P4RzlPxJRkDq4nwa9wo4neqMxT1IzbhoVVIX:l4vxJyDuaf8MxT1It
TLSH
T1F2856B15A2E401ACF1B3D6798A735902E6727C890770A5DF33E879A91F377D05A3E702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-07-14_adf8263788b268d3d67668f8c53db48c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

150 seconds

defense_evasion discovery trojan

Behavioral task

behavioral2

Sample

2026-07-14_adf8263788b268d3d67668f8c53db48c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

defense_evasion discovery trojan

Malware Config

Targets

- Target
  2026-07-14_adf8263788b268d3d67668f8c53db48c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 1.7MB
- SHA256 866622a866304014c771c5f91e1d21fb6a6e2ba9b0856bb2bb044e6af945fa47
- MD5 adf8263788b268d3d67668f8c53db48c
- SHA1 c78463e665d1fa9a5dffab4dc143521356779982
- SHA512 533e8d14bee9d6bcf9bb224b02d008ff6724e3a3a63b10c794aad03d855f1d3f23a9fc449f75b4f7ec58659b84b3af99721af887201704c296b1616d5fd08053
- SSDEEP 24576:Z/P4RzlPxJRkDq4nwa9wo4neqMxT1IzbhoVVIX:l4vxJyDuaf8MxT1It
- TLSH
  T1F2856B15A2E401ACF1B3D6798A735902E6727C890770A5DF33E879A91F377D05A3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion discovery trojan
- Enumerates VirtualBox registry keys
  defense_evasion
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  defense_evasion
- Looks for VirtualBox Guest Additions in registry
  defense_evasion
- Looks for VMWare Tools registry key
  defense_evasion
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverytrojan

behavioral2

defense_evasiondiscoverytrojan

© 2018-2026

Terms | Privacy