General
- Target 2026-07-20_f16ec12fd999e0457458bfb93730ecb0_cobalt-strike_glassworm_icedid_njrat_stealc_vidar
- Size 3.4MB
- Sample260720-cvx8yscv7n
- SHA256 71c4408416f38835688f0fef4565fa566c9ad7a60a0442d77e8887796709afb8
- MD5 f16ec12fd999e0457458bfb93730ecb0
- SHA1 69c601f0f962395031ddf2aa1ccd969f5b127b58
- SHA512 682842c8e9aea44df2f40b05dec10323d48fb502382ced3e9df5deb0da2359082e449831635e2a7bdedaaf290c27bbee7abad196a856cbb12a52140b7e0a24ff
- SSDEEP 98304:VXACCg5vV5jFYlNFMwqz/8ch39FKk6Mvtc0zda5jqumwu33KixlM:VHCqVNKNFMwqz/8ch39FKk6MvtXda5jz
- TLSH T11DF58C5B66BD40E9D9A6D1B9C5078A0BD7B5F8610230C3CB0275CB9A5F333A20E3E765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_f16ec12fd999e0457458bfb93730ecb0_cobalt-strike_glassworm_icedid_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_f16ec12fd999e0457458bfb93730ecb0_cobalt-strike_glassworm_icedid_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_f16ec12fd999e0457458bfb93730ecb0_cobalt-strike_glassworm_icedid_njrat_stealc_vidar
- Size 3.4MB
- SHA256 71c4408416f38835688f0fef4565fa566c9ad7a60a0442d77e8887796709afb8
- MD5 f16ec12fd999e0457458bfb93730ecb0
- SHA1 69c601f0f962395031ddf2aa1ccd969f5b127b58
- SHA512 682842c8e9aea44df2f40b05dec10323d48fb502382ced3e9df5deb0da2359082e449831635e2a7bdedaaf290c27bbee7abad196a856cbb12a52140b7e0a24ff
- SSDEEP 98304:VXACCg5vV5jFYlNFMwqz/8ch39FKk6Mvtc0zda5jqumwu33KixlM:VHCqVNKNFMwqz/8ch39FKk6MvtXda5jz
- TLSH T11DF58C5B66BD40E9D9A6D1B9C5078A0BD7B5F8610230C3CB0275CB9A5F333A20E3E765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL