General

  • Target
    2026-07-30_d829b250d20da086fe23d2d2f35a3d3d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
  • Size 13.6MB
  • Sample260730-r8v33sbb99
  • SHA256 692ec4e6dc1e20ca1d8daca10b31e6f573a0fb3dabde1f01e19e656e05a9f2ac
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-30_d829b250d20da086fe23d2d2f35a3d3d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
    • Size 13.6MB
    • SHA256 692ec4e6dc1e20ca1d8daca10b31e6f573a0fb3dabde1f01e19e656e05a9f2ac
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks