General
- Target 2026-07-14_4316b3c024712561bcba5cbc9e6bc817_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 33.0MB
- Sample260714-qa5desf18t
- SHA256 86aeff66b784702d981408c83e19cb97006ec2ae81acdd81513c5ef9aa989385
- MD5 4316b3c024712561bcba5cbc9e6bc817
- SHA1 1563cd53cb6487799da81aac99333a9949fc0bb4
- SHA512 e8888f3b773e4f0d8755e165e68f9c05ab04ea90de15c9158bd782643e10934feb527e97997a00124394267990cd3f5716b633bc85698317a2ee9602d6a9b0a5
- SSDEEP 196608:gHF3GxbAQv3wejuJDUX47dwdW0LBJ1LJHDXYPAZ9Q0:wFWxfaUX47d4JVZ93
- TLSH T19D7733E862F009E6DC68D239D1C28941E772B8270774D7CF137485671F63AE5983BB2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_4316b3c024712561bcba5cbc9e6bc817_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_4316b3c024712561bcba5cbc9e6bc817_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_4316b3c024712561bcba5cbc9e6bc817_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 33.0MB
- SHA256 86aeff66b784702d981408c83e19cb97006ec2ae81acdd81513c5ef9aa989385
- MD5 4316b3c024712561bcba5cbc9e6bc817
- SHA1 1563cd53cb6487799da81aac99333a9949fc0bb4
- SHA512 e8888f3b773e4f0d8755e165e68f9c05ab04ea90de15c9158bd782643e10934feb527e97997a00124394267990cd3f5716b633bc85698317a2ee9602d6a9b0a5
- SSDEEP 196608:gHF3GxbAQv3wejuJDUX47dwdW0LBJ1LJHDXYPAZ9Q0:wFWxfaUX47d4JVZ93
- TLSH T19D7733E862F009E6DC68D239D1C28941E772B8270774D7CF137485671F63AE5983BB2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application