General
- Target 2026-07-30_9b0c8abaf9aa781d17db5e8cca267615_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar
- Size 1.1MB
- Sample260730-dngs3ayapc
- SHA256 2acae9a2e2177bf59e73ca730042007adb75afb55776e0b47143bb4489656fef
- MD5 9b0c8abaf9aa781d17db5e8cca267615
- SHA1 d95c24ea744b0fb22dda76f3fe45bd80c4793c3e
- SHA512 10305fd896d5553cc3790ba65e0d1ad18d9da61210b5f51062fda646419d7879aba4a3df41e507418d1a4858401599a0ac06a2f0e790f85ef43b9f4cf5911c00
- SSDEEP 24576:iXZLtdz1wzrWVC9Dgh0lhSMXlsr+K1Kiuv3LC5:iHdBwzqqDVcdKvDY
- TLSH T150359E2A67A901FDF0ABD17C99975A01F379B40B13518ADF139412663F9B2E19F3A330
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_9b0c8abaf9aa781d17db5e8cca267615_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_9b0c8abaf9aa781d17db5e8cca267615_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_9b0c8abaf9aa781d17db5e8cca267615_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar
- Size 1.1MB
- SHA256 2acae9a2e2177bf59e73ca730042007adb75afb55776e0b47143bb4489656fef
- MD5 9b0c8abaf9aa781d17db5e8cca267615
- SHA1 d95c24ea744b0fb22dda76f3fe45bd80c4793c3e
- SHA512 10305fd896d5553cc3790ba65e0d1ad18d9da61210b5f51062fda646419d7879aba4a3df41e507418d1a4858401599a0ac06a2f0e790f85ef43b9f4cf5911c00
- SSDEEP 24576:iXZLtdz1wzrWVC9Dgh0lhSMXlsr+K1Kiuv3LC5:iHdBwzqqDVcdKvDY
- TLSH T150359E2A67A901FDF0ABD17C99975A01F379B40B13518ADF139412663F9B2E19F3A330
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.