General
- Target 2026-07-22_36ed62e10af5f6703f365ea7456af94b_cobalt-strike_darkgate_glassworm_icedid_luca-stealer_njrat_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 12.4MB
- Sample260723-ccbbgafb46
- SHA256 ed80a4a60734057f501ceb3200d6268b542ea4493c18497b9860f84ebad13e8c
- MD5 36ed62e10af5f6703f365ea7456af94b
- SHA1 2166da94e44a56a84ebd56052a29ca92772c1841
- SHA512 2214d15f7f066ff7400e454fac0d1d46efa18f227aa59921ccfd9feee7815059b99bb9211f17ee5270e2529d6b4c56f4d79bea9848987a54a072a3e63b2c1f91
- SSDEEP 98304:0nmQKRICbaWUV+m1oW5lVFwAuHTVk1hZxhu:t45EH5GhY
- TLSH T1ABD69D0DBBE51032C56721799B9F6101F736C00BA219C99A799CC7D81FA4A7142BBFF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-22_36ed62e10af5f6703f365ea7456af94b_cobalt-strike_darkgate_glassworm_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_36ed62e10af5f6703f365ea7456af94b_cobalt-strike_darkgate_glassworm_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_36ed62e10af5f6703f365ea7456af94b_cobalt-strike_darkgate_glassworm_icedid_luca-stealer_njrat_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 12.4MB
- SHA256 ed80a4a60734057f501ceb3200d6268b542ea4493c18497b9860f84ebad13e8c
- MD5 36ed62e10af5f6703f365ea7456af94b
- SHA1 2166da94e44a56a84ebd56052a29ca92772c1841
- SHA512 2214d15f7f066ff7400e454fac0d1d46efa18f227aa59921ccfd9feee7815059b99bb9211f17ee5270e2529d6b4c56f4d79bea9848987a54a072a3e63b2c1f91
- SSDEEP 98304:0nmQKRICbaWUV+m1oW5lVFwAuHTVk1hZxhu:t45EH5GhY
- TLSH T1ABD69D0DBBE51032C56721799B9F6101F736C00BA219C99A799CC7D81FA4A7142BBFF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects Windows executables referencing non-Windows User-Agents
Executes dropped EXE
Modifies system executable filetype association