General
- Target 2026-07-31_a82d13954981baca52b27169eb357a74_cobalt-strike_glassworm_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 4.8MB
- Sample260731-brplzatwev
- SHA256 d96607fc3aba2bef4d7c365f12a52bd67adea2facae14d6b13a3f1f8236cf3ea
- MD5 a82d13954981baca52b27169eb357a74
- SHA1 144b64a98bc7309abc5ddc89818229895dfc1c3e
- SHA512 5a0a754203091a9edb3f980d4e095d2693345767535ff074b9e975d1d1c10d9b22ccebe5dee6f7f2f48610eb5a4410b65b8f17f3a5eb832c98767333e2f119d6
- SSDEEP 49152:YiUTzTYwgj7Kp0DQ9ZflfDkw7hOqfYDZnc9uS13sppcXecBHMTfBWGn88lKtZnNR:efg6WD49L6WGn88l01x1SHTCXV/
- TLSH T1EA365B07769C8561ED72433585B327A1A7B2BC843BA2A3CF5780313D1D3B7948E6A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_a82d13954981baca52b27169eb357a74_cobalt-strike_glassworm_icedid_luca-stealer_mespinoza_nj.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_a82d13954981baca52b27169eb357a74_cobalt-strike_glassworm_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 4.8MB
- SHA256 d96607fc3aba2bef4d7c365f12a52bd67adea2facae14d6b13a3f1f8236cf3ea
- MD5 a82d13954981baca52b27169eb357a74
- SHA1 144b64a98bc7309abc5ddc89818229895dfc1c3e
- SHA512 5a0a754203091a9edb3f980d4e095d2693345767535ff074b9e975d1d1c10d9b22ccebe5dee6f7f2f48610eb5a4410b65b8f17f3a5eb832c98767333e2f119d6
- SSDEEP 49152:YiUTzTYwgj7Kp0DQ9ZflfDkw7hOqfYDZnc9uS13sppcXecBHMTfBWGn88lKtZnNR:efg6WD49L6WGn88l01x1SHTCXV/
- TLSH T1EA365B07769C8561ED72433585B327A1A7B2BC843BA2A3CF5780313D1D3B7948E6A727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables calling ClearMyTracksByProcess
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE