General
- Target 2026-07-30_761e94771cdc1fee4a2c0b0f3095fc1e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 13.5MB
- Sample260730-ss47gs1bnd
- SHA256 b5f776963d1ab5ccc92e303adca9be3ea7161851121729f90276441e7d8b6cef
- MD5 761e94771cdc1fee4a2c0b0f3095fc1e
- SHA1 841b20d58247ecbb89aebe762e60f873a92cb676
- SHA512 524944c425f5a84e069a83527b6ecbc6825f12f9b9fce24da21ec59f8feb0966f4f2d132e69fa29de9395f04c6aa034aaf1f71e17bf078c822d202a9da7ac4e5
- SSDEEP 393216:n9YiiPL1XMCHWUjqVg74w0ugWwax7mzPaBwVJoM:n9YiMBXMb8ODw0uKax7mzPayV+M
- TLSH T187E6331CE6E009B6EDF3067F99B7C82D82397D9A1F62C58713F012A65E631E4587CB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-30_761e94771cdc1fee4a2c0b0f3095fc1e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_761e94771cdc1fee4a2c0b0f3095fc1e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 13.5MB
- SHA256 b5f776963d1ab5ccc92e303adca9be3ea7161851121729f90276441e7d8b6cef
- MD5 761e94771cdc1fee4a2c0b0f3095fc1e
- SHA1 841b20d58247ecbb89aebe762e60f873a92cb676
- SHA512 524944c425f5a84e069a83527b6ecbc6825f12f9b9fce24da21ec59f8feb0966f4f2d132e69fa29de9395f04c6aa034aaf1f71e17bf078c822d202a9da7ac4e5
- SSDEEP 393216:n9YiiPL1XMCHWUjqVg74w0ugWwax7mzPaBwVJoM:n9YiMBXMb8ODw0uKax7mzPayV+M
- TLSH T187E6331CE6E009B6EDF3067F99B7C82D82397D9A1F62C58713F012A65E631E4587CB12
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.