General
- Target 2026-07-24_8c89e32e42f0b75b87552f4075c400bf_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 17.2MB
- Sample260724-a7ftbsyves
- SHA256 f185617ab50d04984885932cb29eaa54d8cbb3bf74cc1c6214436e7f6494d179
- MD5 8c89e32e42f0b75b87552f4075c400bf
- SHA1 3850ca383883ab5ce664f01d46d7a85d6a148add
- SHA512 2527fffe77e3e8c03f66f3c1d7172cffdf482cb71feb9d2120785c888bec37c0f2e66f7e26b1d613293b1c446924cf018d915b5724cb3e2301ce9a388ac7883c
- SSDEEP 98304:xDCibVb7ozbMsdDquUWKpy3o0TksGXQX2isKq8wJX9ulnTrdntWkmzAcelK9411V:xDCUb7ApUo3o0TPGXQXtpl9TQzcQgz
- TLSH T17E074A06B361C465D41A82388DD7C7AAAB717C91CF2283C736E5B36E1E377D12EB6601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-24_8c89e32e42f0b75b87552f4075c400bf_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_8c89e32e42f0b75b87552f4075c400bf_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_8c89e32e42f0b75b87552f4075c400bf_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 17.2MB
- SHA256 f185617ab50d04984885932cb29eaa54d8cbb3bf74cc1c6214436e7f6494d179
- MD5 8c89e32e42f0b75b87552f4075c400bf
- SHA1 3850ca383883ab5ce664f01d46d7a85d6a148add
- SHA512 2527fffe77e3e8c03f66f3c1d7172cffdf482cb71feb9d2120785c888bec37c0f2e66f7e26b1d613293b1c446924cf018d915b5724cb3e2301ce9a388ac7883c
- SSDEEP 98304:xDCibVb7ozbMsdDquUWKpy3o0TksGXQX2isKq8wJX9ulnTrdntWkmzAcelK9411V:xDCUb7ApUo3o0TPGXQXtpl9TQzcQgz
- TLSH T17E074A06B361C465D41A82388DD7C7AAAB717C91CF2283C736E5B36E1E377D12EB6601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE