General
- Target 2026-07-20_07f38cfe6e1a5ef6a33626a97c99fb05_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 17.1MB
- Sample260720-mnhvsshv8x
- SHA256 d2695cccf9b93f92205653b325f30bdfc7870119b70dea980727c30f31cfacd0
- MD5 07f38cfe6e1a5ef6a33626a97c99fb05
- SHA1 cbacb2c903d03ec8f141208c2b58eb217ce8e9a8
- SHA512 02a7358bb93af832f00afe9e960792014919dff6b9a176eb859391cc14464ba46ab9c3f5de099a93fa65a0903b8d5ccba9e7893c0565484992288ee987324294
- SSDEEP 98304:xDCibVb7ozbMsdDquUWKpy3o0TksGXQX2isKq8wJX9ulnTrdntWkmzAcelK9411f:xDCUb7ApUo3o0TPGXQXtpl9TQzcQgp
- TLSH T114074A06B361C465D41A82388DD7C7AAAB717C91CF2283C736E5B36E1E377D12EB6601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_07f38cfe6e1a5ef6a33626a97c99fb05_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_07f38cfe6e1a5ef6a33626a97c99fb05_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_07f38cfe6e1a5ef6a33626a97c99fb05_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 17.1MB
- SHA256 d2695cccf9b93f92205653b325f30bdfc7870119b70dea980727c30f31cfacd0
- MD5 07f38cfe6e1a5ef6a33626a97c99fb05
- SHA1 cbacb2c903d03ec8f141208c2b58eb217ce8e9a8
- SHA512 02a7358bb93af832f00afe9e960792014919dff6b9a176eb859391cc14464ba46ab9c3f5de099a93fa65a0903b8d5ccba9e7893c0565484992288ee987324294
- SSDEEP 98304:xDCibVb7ozbMsdDquUWKpy3o0TksGXQX2isKq8wJX9ulnTrdntWkmzAcelK9411f:xDCUb7ApUo3o0TPGXQXtpl9TQzcQgp
- TLSH T114074A06B361C465D41A82388DD7C7AAAB717C91CF2283C736E5B36E1E377D12EB6601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE