2026-07-28_95bb340507cda845a78a44cde4e6f030_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-28_95bb340507cda845a78a44cde4e6f030_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 2.3MB
Sample260728-e88yqayang
SHA256 e12f437786fe259aafb664754701aa61c554e46a368a1a4f2bc03ca3f6b58068
MD5 95bb340507cda845a78a44cde4e6f030
SHA1 34e82d9a00add31f60731879d20a5cfbc2c795a0
SHA512 ddc12e957aea3b03f607e50a2107a2e9aec49c882ad4bae9128a7174727cad81e63ddd679969eb8a68d8f7a69b1743542bb4219b74be7951c5dc1b3cbf5fc2d5
SSDEEP 24576:WhUwBqAUQjJWfx2M3rFE+g3wwZ4Kvrcm56RUWNLolVkS1zTnhzrPF:Wh/f39Wfx2M7FBg3wwZ4iYm4Utzdt
TLSH
T133B5C44A626C00A8F175927CCA5EA926D1B13D4107E066CF45E43F973F6FAE53A3E318
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-07-28_95bb340507cda845a78a44cde4e6f030_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 2.3MB

2026-07-28_95bb340507cda845a78a44cde4e6f030_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH 5ee001f39c39586efd9908ccac44c9a0
SHA256 e12f437786fe259aafb664754701aa61c554e46a368a1a4f2bc03ca3f6b58068
MD5 95bb340507cda845a78a44cde4e6f030
SHA1 34e82d9a00add31f60731879d20a5cfbc2c795a0
SHA512 ddc12e957aea3b03f607e50a2107a2e9aec49c882ad4bae9128a7174727cad81e63ddd679969eb8a68d8f7a69b1743542bb4219b74be7951c5dc1b3cbf5fc2d5
SSDEEP 24576:WhUwBqAUQjJWfx2M3rFE+g3wwZ4Kvrcm56RUWNLolVkS1zTnhzrPF:Wh/f39Wfx2M7FBg3wwZ4iYm4Utzdt
TLSH
T133B5C44A626C00A8F175927CCA5EA926D1B13D4107E066CF45E43F973F6FAE53A3E318
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

c1:8f:5c:0a:80:ab:5b:66:ae:ee:c1:ee:2b:bd:f1:c4:6e:d6:37:c3:41:42:62:01:e9:03:75:e8:ae:50:7e:4d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Rockstar Games\, Inc.,OU=Rockstar Partners,O=Rockstar Games\, Inc.,L=New York,ST=New York,C=US

Chains

Jun 8, 2026

CN=Rockstar Games\, Inc.,OU=Rockstar Partners,O=Rockstar Games\, Inc.,L=New York,ST=New York,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Rockstar Games\, Inc.,OU=Rockstar Partners,O=Rockstar Games\, Inc.,L=New York,ST=New York,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Rockstar Games\, Inc.,OU=Rockstar Partners,O=Rockstar Games\, Inc.,L=New York,ST=New York,C=US

Serial Number

05:c1:ee:f7:52:5c:83:94:28:87:4f:0c:80:df:71:be

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 1, 2025 - Aug 2, 2028

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

1230704

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

SocialClubHelper.pdb

kernel32

GetQueuedCompletionStatus PostQueuedCompletionStatus ConnectNamedPipe CreateNamedPipeW CancelIo GetNamedPipeClientProcessId GetNamedPipeServerProcessId RtlUnwind VirtualFree WideCharToMultiByte GetStartupInfoW GetExitCodeProcess QueryPerformanceFrequency HeapSize GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc SetStdHandle GetTimeZoneInformation ReadConsoleW FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc GetConsoleMode GetConsoleOutputCP WriteConsoleW GetFileType GetStdHandle GetModuleHandleExW ExitProcess LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc RtlPcToFileHeader RtlUnwindEx TerminateProcess InitializeSListHead QueryPerformanceCounter OpenProcess WaitForSingleObject GetCommandLineW LoadLibraryW FreeLibrary SetPriorityClass GetCurrentProcess CloseHandle CreateFileW GetCurrentProcessId Sleep GetProcAddress GetModuleHandleW SetLastError CreateIoCompletionPort IsProcessorFeaturePresent UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GetCPInfo LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx GetStringTypeW SetThreadUILanguage MoveFileW GetSystemTimeAsFileTime GetVersionExW LocalFree InitializeCriticalSectionAndSpinCount RaiseException GetModuleHandleA GetTickCount CreateProcessW UnmapViewOfFile MapViewOfFile OpenFileMappingW WaitForMultipleObjects ResetEvent SetEvent WaitNamedPipeW TransactNamedPipe SetNamedPipeHandleState RegisterWaitForSingleObject UnregisterWaitEx CreateEventW WriteFile SetFilePointer GetLocalTime OutputDebugStringW OutputDebugStringA IsDebuggerPresent CreateMutexW ReleaseMutex SetFilePointerEx SetEndOfFile ReadFile GetFileSizeEx DeleteFileW GetLastError VirtualQueryEx GetProcessId GetCurrentThreadId CreateThread CreateSemaphoreW ReleaseSemaphore DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection SetUnhandledExceptionFilter RtlCaptureContext MultiByteToWideChar GetModuleFileNameW CreateDirectoryW VirtualAlloc

user32

RegisterClassExW CreateWindowExW DestroyWindow SetFocus VkKeyScanExW GetTouchInputInfo CloseTouchInputHandle GetCapture SetCapture ReleaseCapture GetSystemMetrics BeginPaint EndPaint GetClientRect SetCursor GetCursorPos GetQueueStatus LoadStringW wsprintfW MessageBoxW GetDoubleClickTime ScreenToClient WindowFromPoint TrackMouseEvent SetWindowLongPtrW SetClassLongPtrW LoadCursorW LoadIconW RegisterWindowMessageW SetWindowPos SendMessageW PostMessageW CallWindowProcW FlashWindowEx GetWindowPlacement BringWindowToTop IsZoomed GetActiveWindow SendInput IsWindowEnabled GetMenu SetMenu UpdateWindow SetForegroundWindow AllowSetForegroundWindow GetWindowRect AdjustWindowRectExForDpi FillRect InflateRect DefWindowProcW ClientToScreen GetMessageTime IsRectEmpty PtInRect GetWindowLongW SetWindowLongW GetClassLongPtrW EnumChildWindows MonitorFromWindow GetMonitorInfoW GetMessageW TranslateMessage DispatchMessageW PostQuitMessage SetTimer KillTimer DrawTextW SetRect DestroyIcon DrawIconEx CreateIconIndirect GetKeyState IsWindowVisible GetKeyboardLayout ReleaseDC GetDC IsWindow SetParent SendMessageA MsgWaitForMultipleObjectsEx ShowWindow PeekMessageW WaitMessage UnregisterClassW CallMsgFilterW GetWindowLongPtrW

gdi32

CreateSolidBrush GetDeviceCaps GetStockObject SetDCBrushColor CreateBitmap CreateCompatibleDC SwapBuffers DeleteDC DeleteObject SelectObject SetPixelFormat SetBkMode SetTextColor CreateDIBSection CreateFontIndirectW ChoosePixelFormat

shell32

ShellExecuteExW SetCurrentProcessExplicitAppUserModelID ShellExecuteA SHGetFolderPathW ShellExecuteW SHGetPropertyStoreForWindow SHGetKnownFolderPath SHCreateItemFromParsingName

ole32

CoUninitialize CoInitializeEx CoCreateInstance PropVariantClear CoTaskMemFree

libcef

cef_string_list_free cef_string_list_alloc cef_request_context_cef_create_context_shared cef_request_context_get_global_context cef_cookie_manager_get_global_manager cef_value_create cef_string_userfree_utf16_free cef_log cef_get_vlog_level cef_get_min_log_level cef_string_wide_clear cef_string_wide_set cef_set_osmodal_loop cef_string_utf16_cmp cef_string_utf16_to_utf8 cef_string_utf8_to_utf16 cef_string_utf16_clear cef_string_utf8_clear cef_string_utf16_set cef_string_map_alloc cef_string_map_free cef_api_hash cef_command_line_create cef_command_line_get_global cef_currently_on cef_post_task cef_process_message_create cef_post_delayed_task cef_browser_host_create_browser cef_browser_host_get_browser_by_identifier cef_dictionary_value_create cef_list_value_create cef_v8_context_get_current_context cef_execute_process cef_initialize cef_shutdown cef_do_message_loop_work cef_v8_value_create_bool cef_v8_value_create_int cef_set_nestable_tasks_allowed cef_parse_url cef_get_mime_type cef_base64_encode cef_uriencode cef_v8_value_create_double cef_v8_value_create_string cef_v8_value_create_object cef_v8_value_create_array cef_v8_value_create_function cef_stream_reader_create_for_file cef_stream_reader_create_for_data cef_stream_reader_create_for_handler cef_string_list_size cef_string_list_value cef_string_list_append cef_string_map_size cef_string_map_key cef_string_map_value cef_string_map_append cef_string_multimap_size cef_string_multimap_key cef_string_multimap_value cef_string_multimap_append cef_string_multimap_alloc cef_string_multimap_free cef_zip_reader_create

opengl32

glViewport glVertex2i glVertex2f glTexSubImage2D glTexParameteri glTexImage2D glTexEnvf glRotatef glPushMatrix glPushAttrib glPopMatrix glPopAttrib glPixelStorei glOrtho glMatrixMode glLoadIdentity glLineWidth glInterleavedArrays glHint glGenTextures glEnd glEnable glDrawArrays glDisable glDeleteTextures glColor4f glColor3f glClearColor glClear glBlendFunc glBindTexture glBegin wglMakeCurrent wglDeleteContext wglCreateContext

uxtheme

SetWindowTheme

dwmapi

DwmSetWindowAttribute DwmExtendFrameIntoClientArea DwmIsCompositionEnabled

wtsapi32

WTSRegisterSessionNotification WTSUnRegisterSessionNotification

wininet

HttpQueryInfoW HttpAddRequestHeadersW InternetCrackUrlW InternetOpenW InternetCloseHandle InternetConnectW InternetReadFile InternetQueryDataAvailable InternetSetOptionW HttpOpenRequestW HttpSendRequestW

version

VerQueryValueA GetFileVersionInfoW GetFileVersionInfoSizeW

shlwapi

PathFindFileNameW

winmm

timeGetTime timeBeginPeriod timeEndPeriod

advapi32

RegGetValueW ConvertStringSecurityDescriptorToSecurityDescriptorW ConvertSidToStringSidW GetTokenInformation OpenProcessToken

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-28_95bb340507cda845a78a44cde4e6f030_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar

kernel32

user32

gdi32

shell32

ole32

libcef

opengl32

uxtheme

dwmapi

wtsapi32

wininet

version

shlwapi

winmm

advapi32

generic