General
- Target 2026-07-20_657b0b803cc8e462a7965b551f3f1b6f_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar
- Size 1.8MB
- Sample260720-dkpphaf16z
- SHA256 c728cde4f71acb6c6ee5d99c20194ae5cee0bddebca0c6777cfe8105b5509aa1
- MD5 657b0b803cc8e462a7965b551f3f1b6f
- SHA1 028f64da534a48306d43a2cfefb9025da55613a8
- SHA512 4df9847c163078ee96f6b85f466c5887fd0c2d5022aacc04d94361cb4adf0abb8f6e1f2adeaa8b08ac362310eebb543975fd018cc8b2a9354caf8f7c46f095e0
- SSDEEP 49152:jAkTe+d8lTHJ9rGW/j2+QMcJHoKO5LeVxfI:joFj/jInJZO56VxA
- TLSH T19495BF4773E6C0F9DA7B81F9C9224622E77174610B248ADF36A4462EDF63BD04E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-20_657b0b803cc8e462a7965b551f3f1b6f_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_657b0b803cc8e462a7965b551f3f1b6f_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_657b0b803cc8e462a7965b551f3f1b6f_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar
- Size 1.8MB
- SHA256 c728cde4f71acb6c6ee5d99c20194ae5cee0bddebca0c6777cfe8105b5509aa1
- MD5 657b0b803cc8e462a7965b551f3f1b6f
- SHA1 028f64da534a48306d43a2cfefb9025da55613a8
- SHA512 4df9847c163078ee96f6b85f466c5887fd0c2d5022aacc04d94361cb4adf0abb8f6e1f2adeaa8b08ac362310eebb543975fd018cc8b2a9354caf8f7c46f095e0
- SSDEEP 49152:jAkTe+d8lTHJ9rGW/j2+QMcJHoKO5LeVxfI:joFj/jInJZO56VxA
- TLSH T19495BF4773E6C0F9DA7B81F9C9224622E77174610B248ADF36A4462EDF63BD04E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables Discord URL observed in first stage droppers
-
Detects executables containing URLs to raw contents of a Github gist