General
- Target 2026-07-15_d816ce7f9e7907a87dcc2d976539ec64_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar
- Size 7.9MB
- Sample260716-brqt2aas4n
- SHA256 d562420498f22dd3df050883553a087aef66c150242cdcc57bcec3ce19b3923a
- MD5 d816ce7f9e7907a87dcc2d976539ec64
- SHA1 fe9f73db4d179bfc4c5b8f64b379870f234b1f09
- SHA512 602c289f0edffb5f76eee84e71b66d484dc03688371df376b3e0e9cc84d5fbe8ebce4893f439071e4378b8bd40aa6760605da74a1f03aed663f8a54dcb80694e
- SSDEEP 196608:2FASe8lh3M8GUIRsRzj4iuRAAkkFVXdaCQ4t9th:2zc8GUIRsRzj4iuRPFVXdaCQ4t9
- TLSH T1F8869F2FD25220ECD2A6C138C1055763E9B1B1111B21BBEB12B587A56B77AF04FFE742
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_d816ce7f9e7907a87dcc2d976539ec64_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_d816ce7f9e7907a87dcc2d976539ec64_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_d816ce7f9e7907a87dcc2d976539ec64_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar
- Size 7.9MB
- SHA256 d562420498f22dd3df050883553a087aef66c150242cdcc57bcec3ce19b3923a
- MD5 d816ce7f9e7907a87dcc2d976539ec64
- SHA1 fe9f73db4d179bfc4c5b8f64b379870f234b1f09
- SHA512 602c289f0edffb5f76eee84e71b66d484dc03688371df376b3e0e9cc84d5fbe8ebce4893f439071e4378b8bd40aa6760605da74a1f03aed663f8a54dcb80694e
- SSDEEP 196608:2FASe8lh3M8GUIRsRzj4iuRAAkkFVXdaCQ4t9th:2zc8GUIRsRzj4iuRPFVXdaCQ4t9
- TLSH T1F8869F2FD25220ECD2A6C138C1055763E9B1B1111B21BBEB12B587A56B77AF04FFE742
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of NtSetInformationThreadHideFromDebugger