General
- Target 2026-07-15_579a942fbaeb9afab58616b75b78dc72_cobalt-strike_glassworm_icedid_luca-stealer_njrat
- Size 1.5MB
- Sample260715-hamvdagx2z
- SHA256 0e117d2dfce624900b5b55c9df006a68ec2f8041387ce534c54919bf6d2a318b
- MD5 579a942fbaeb9afab58616b75b78dc72
- SHA1 7e305cba5c95ddaf54707252f6edf0e556caf7e2
- SHA512 1f2a2bf2671db387d9e2f418fbb99a5883d63c864b52a6ce52e075319909386ac0138242b0558d562d8b2ed09f6342687c81e43364f769c56853e0e2989dad8d
- SSDEEP 24576:I2ctIvKqwpMKvT7QvYMy91tA2DP2crkmQNHElqKlRRaBbpx:9ToMKvPQvOi8AmQNsrlLa9L
- TLSH T1F0655A0673A2C0EDCA66B1BFC51D0226EA317C24F7E89ADB2150752DDE639DC4A3671C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-15_579a942fbaeb9afab58616b75b78dc72_cobalt-strike_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_579a942fbaeb9afab58616b75b78dc72_cobalt-strike_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_579a942fbaeb9afab58616b75b78dc72_cobalt-strike_glassworm_icedid_luca-stealer_njrat
- Size 1.5MB
- SHA256 0e117d2dfce624900b5b55c9df006a68ec2f8041387ce534c54919bf6d2a318b
- MD5 579a942fbaeb9afab58616b75b78dc72
- SHA1 7e305cba5c95ddaf54707252f6edf0e556caf7e2
- SHA512 1f2a2bf2671db387d9e2f418fbb99a5883d63c864b52a6ce52e075319909386ac0138242b0558d562d8b2ed09f6342687c81e43364f769c56853e0e2989dad8d
- SSDEEP 24576:I2ctIvKqwpMKvT7QvYMy91tA2DP2crkmQNHElqKlRRaBbpx:9ToMKvPQvOi8AmQNsrlLa9L
- TLSH T1F0655A0673A2C0EDCA66B1BFC51D0226EA317C24F7E89ADB2150752DDE639DC4A3671C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.