General
- Target 2026-07-15_1265287278e3d33577085021a6ed6ec5_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 2.3MB
- Sample260716-appnhshv2q
- SHA256 0099fe02f150254c52dc36022238930fedc7af858a1f595c4ff50ad8fc485d05
- MD5 1265287278e3d33577085021a6ed6ec5
- SHA1 56a7d7e5041e21e032f66ca0acd265cd656119a0
- SHA512 b91c1400cb5c71b2bbe3a24613b1531c7384e0fe031bd4efe93f6fc3ffb304d8aae1c3437d837a9fd8965ffbee96ed6a3f6d2d2cec671f06886e07304d0fa21f
- SSDEEP 24576:KDdzFYrin9S7FJF3WJ/Et7/LSYUymq3PuPmjBp4Mjc7qWMWKEzy3J:KDdxw6gXF3W1QrL1UDq3P8mlp4DOZ
- TLSH T1C3B58D5393FC41E4E07B4674D8698626EEF27C190B3496DF0241FA1E2F33AD25A76722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_1265287278e3d33577085021a6ed6ec5_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_1265287278e3d33577085021a6ed6ec5_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_1265287278e3d33577085021a6ed6ec5_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 2.3MB
- SHA256 0099fe02f150254c52dc36022238930fedc7af858a1f595c4ff50ad8fc485d05
- MD5 1265287278e3d33577085021a6ed6ec5
- SHA1 56a7d7e5041e21e032f66ca0acd265cd656119a0
- SHA512 b91c1400cb5c71b2bbe3a24613b1531c7384e0fe031bd4efe93f6fc3ffb304d8aae1c3437d837a9fd8965ffbee96ed6a3f6d2d2cec671f06886e07304d0fa21f
- SSDEEP 24576:KDdzFYrin9S7FJF3WJ/Et7/LSYUymq3PuPmjBp4Mjc7qWMWKEzy3J:KDdxw6gXF3W1QrL1UDq3P8mlp4DOZ
- TLSH T1C3B58D5393FC41E4E07B4674D8698626EEF27C190B3496DF0241FA1E2F33AD25A76722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects DonutLoader
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.