General
- Target 2026-07-30_d829b250d20da086fe23d2d2f35a3d3d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 13.6MB
- Sample260730-r8v33sbb99
- SHA256 692ec4e6dc1e20ca1d8daca10b31e6f573a0fb3dabde1f01e19e656e05a9f2ac
- MD5 d829b250d20da086fe23d2d2f35a3d3d
- SHA1 f2fe509f7f5296c3c05d1519e17f41990367453d
- SHA512 aafe45f047e5c6ee610fbf01f7daba19bd14fc4414639dc75e0089b8c2ad63c3a8df1fcbcf7d5bd0a655ee67a20d7c510655fa542f301186de0f666c4099789c
- SSDEEP 393216:H9dnSC5N9YiiPL1XMCHWUjqVg74w0ugWwax7mzPaBwVJoM:H9dnSC5N9YiMBXMb8ODw0uKax7mzPay3
- TLSH T141E6331CDAE009B7EAF7467F9AB7C81DD239BD991F62C58713F002E65E630E40879612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-30_d829b250d20da086fe23d2d2f35a3d3d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_d829b250d20da086fe23d2d2f35a3d3d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 13.6MB
- SHA256 692ec4e6dc1e20ca1d8daca10b31e6f573a0fb3dabde1f01e19e656e05a9f2ac
- MD5 d829b250d20da086fe23d2d2f35a3d3d
- SHA1 f2fe509f7f5296c3c05d1519e17f41990367453d
- SHA512 aafe45f047e5c6ee610fbf01f7daba19bd14fc4414639dc75e0089b8c2ad63c3a8df1fcbcf7d5bd0a655ee67a20d7c510655fa542f301186de0f666c4099789c
- SSDEEP 393216:H9dnSC5N9YiiPL1XMCHWUjqVg74w0ugWwax7mzPaBwVJoM:H9dnSC5N9YiMBXMb8ODw0uKax7mzPay3
- TLSH T141E6331CDAE009B7EAF7467F9AB7C81DD239BD991F62C58713F002E65E630E40879612
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.