2026-07-31_2f6da23da104c8c45d132e24e3fefb60_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-31_2f6da23da104c8c45d132e24e3fefb60_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 14.8MB
Sample260731-e1x69aap7t
SHA256 0b6dc3f7fa4874c942bb87382eb4f904a797b338e8f2fbfc647c95b460e885a5
MD5 2f6da23da104c8c45d132e24e3fefb60
SHA1 66f130f88a233d160e0f84414a2ec0e574d84045
SHA512 b132c44931b605df3393cac069ee05b2ffb60facb204625a86112da07702bd96edb74502b7fe05988206ba682997f01c3026afb634f5d58f828ae1d52e670b4e
SSDEEP 196608:713HyIZ9Tqii6gKPActi7gsxeERtHpIVrc8v4zdtzrD5:cIZ9TqibitJIPQR
TLSH
T15FF63A5476A6C5D9C4B3C1BCC19797B3FA313C84CB2886F75A503A5A2FBA3E0597A700
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-31_2f6da23da104c8c45d132e24e3fefb60_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-07-31_2f6da23da104c8c45d132e24e3fefb60_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 14.8MB

2026-07-31_2f6da23da104c8c45d132e24e3fefb60_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH 31c3f20e8a550d86b51a6ad1c7b2ad98
SHA256 0b6dc3f7fa4874c942bb87382eb4f904a797b338e8f2fbfc647c95b460e885a5
MD5 2f6da23da104c8c45d132e24e3fefb60
SHA1 66f130f88a233d160e0f84414a2ec0e574d84045
SHA512 b132c44931b605df3393cac069ee05b2ffb60facb204625a86112da07702bd96edb74502b7fe05988206ba682997f01c3026afb634f5d58f828ae1d52e670b4e
SSDEEP 196608:713HyIZ9Tqii6gKPActi7gsxeERtHpIVrc8v4zdtzrD5:cIZ9TqibitJIPQR
TLSH
T15FF63A5476A6C5D9C4B3C1BCC19797B3FA313C84CB2886F75A503A5A2FBA3E0597A700
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9906664

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Asephy\AppData\Roaming\GameMakerStudio2\Cache\GMS2CACHE\Femboy_Bur_E98A55EB\Default\Scripts\llvm-win\Sln\x64\Release\Femboy_Burgers.pdb

wininet

InternetReadFile InternetSetOptionA InternetCloseHandle HttpSendRequestA InternetOpenA HttpQueryInfoA InternetConnectA InternetCanonicalizeUrlA HttpOpenRequestA InternetCrackUrlA InternetGetConnectedState

d3d11

D3D11CreateDevice

dbghelp

MiniDumpWriteDump

winmm

timeGetDevCaps timeBeginPeriod joyGetPosEx joyGetPos timeGetTime timeEndPeriod

ws2_32

freeaddrinfo getpeername WSAAddressToStringA WSAGetLastError WSAStartup socket setsockopt sendto send select recvfrom recv ntohs listen getsockopt ioctlsocket connect closesocket bind accept __WSAFDIsSet htons inet_pton getnameinfo inet_ntop getaddrinfo

gdiplus

GdiplusStartup GdiplusShutdown

comctl32

InitCommonControlsEx

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

rpcrt4

UuidToStringW UuidCreate

iphlpapi

NotifyIpInterfaceChange GetAdaptersAddresses

avrt

AvSetMmThreadCharacteristicsA

propsys

PropVariantToInt64 PropVariantToUInt32

api-ms-win-core-path-l1-1-0

PathCchCombine

kernel32

GetStdHandle FreeLibraryAndExitThread ExitThread PeekNamedPipe GetFileType GetFileInformationByHandle GetDriveTypeW MoveFileExW SetFileAttributesW GetFileAttributesExW HeapWalk HeapValidate FileTimeToSystemTime SystemTimeToTzSpecificLocalTime FindFirstFileExW GetModuleHandleExW TlsFree TlsSetValue TlsGetValue WriteFile RtlUnwind RtlPcToFileHeader RtlUnwindEx GetStringTypeW GetCPInfo LCMapStringEx GetConsoleOutputCP GetConsoleMode DecodePointer EncodePointer FlsFree GetDateFormatW TlsAlloc GetFileSizeEx SetFilePointerEx FlsSetValue FlsGetValue FlsAlloc OutputDebugStringA GetCurrentProcess K32GetProcessMemoryInfo InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection CloseHandle GetLastError SetWaitableTimer CreateWaitableTimerW GetConsoleWindow GetCommandLineW ExpandEnvironmentStringsW CreateDirectoryW CreateFileW GetFinalPathNameByHandleW GetFullPathNameW SetUnhandledExceptionFilter SetErrorMode Sleep GetCurrentProcessId GetCurrentThreadId GetModuleFileNameW GetModuleHandleW MoveFileA CompareStringW WideCharToMultiByte GetFileAttributesW HeapReAlloc ReadFile SetFilePointer FreeLibrary GetProcAddress LoadLibraryExW LocalFree FormatMessageA QueryPerformanceCounter QueryPerformanceFrequency WaitForSingleObject GetTickCount64 InitializeCriticalSection InitializeConditionVariable WakeConditionVariable SleepConditionVariableCS CreateThread SetThreadPriority LoadLibraryW GetCurrentDirectoryW DeleteFileW SetLastError GetExitCodeThread FormatMessageW GetSystemInfo GetVersionExW GetLocaleInfoW CreateDirectoryA FindClose FindFirstFileW FindNextFileW RemoveDirectoryW GetTempPathA ResumeThread CreateProcessW SetCurrentDirectoryA GetCurrentDirectoryA GlobalAlloc GlobalUnlock GlobalLock VerSetConditionMask VerifyVersionInfoW GetEnvironmentVariableA SetEnvironmentVariableA CreateFileMappingW MapViewOfFile ExitProcess lstrlenA GlobalFree GetVersion LoadLibraryA DebugBreak WaitForSingleObjectEx CreateEventExA SleepConditionVariableSRW WakeAllConditionVariable TryEnterCriticalSection InitializeCriticalSectionEx GetNativeSystemInfo GetProcessHeap HeapFree HeapAlloc InitializeSListHead GetSystemTimeAsFileTime GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext CreateEventW ResetEvent SetEvent LoadLibraryExA VirtualQuery VirtualProtect RaiseException GetTimeFormatW LCMapStringW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW MultiByteToWideChar ReadConsoleW GetTimeZoneInformation SetStdHandle IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FlushFileBuffers FreeEnvironmentStringsW SetEnvironmentVariableW SetEndOfFile HeapSize GetFileSize WriteConsoleW

user32

GetAsyncKeyState keybd_event OpenClipboard CloseClipboard SetClipboardData GetClipboardData EmptyClipboard IsClipboardFormatAvailable GetForegroundWindow SetDlgItemTextA GetWindowLongW GetWindowPlacement ReleaseDC GetDC DrawTextW MonitorFromWindow SetWindowLongPtrW GetCursorPos SetCursorPos UpdateWindow MessageBoxW SetProcessDPIAware EnumDisplaySettingsA IsDialogMessageW MsgWaitForMultipleObjectsEx PeekMessageW DispatchMessageW TranslateMessage wsprintfW GetDlgItemTextW SetDlgItemTextW GetMonitorInfoW EnumDisplayDevicesW EnumDisplaySettingsW LoadImageW EndDialog CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW FindWindowExA FindWindowA SetParent ScreenToClient SetCursor AdjustWindowRectEx GetClientRect InvalidateRect SetForegroundWindow GetSystemMetrics ReleaseCapture SetCapture GetKeyState SetFocus BringWindowToTop SetWindowPlacement SetWindowPos SetLayeredWindowAttributes ShowWindow DestroyWindow CreateWindowExW RegisterClassExW DefWindowProcW PostThreadMessageW PostMessageW SendMessageW SendMessageA EnumWindows GetWindowLongPtrW IntersectRect GetWindowRect GetActiveWindow IsWindowVisible GetLayeredWindowAttributes MessageBoxA DialogBoxParamW CreateDialogParamW MapWindowPoints ClientToScreen GetDlgItem SetWindowTextW LoadCursorW MoveWindow

gdi32

SelectObject CreateRectRgnIndirect GetRgnBox DeleteObject GetStockObject GetDeviceCaps CombineRgn

comdlg32

GetOpenFileNameW GetSaveFileNameW

advapi32

RegOpenKeyExW RegQueryValueExW CryptAcquireContextA CryptReleaseContext CryptGenRandom RegCloseKey

shell32

SHGetFolderPathW ShellExecuteW

ole32

PropVariantClear CoInitialize CoTaskMemFree CoCreateInstance CoCreateFreeThreadedMarshaler

dwmapi

DwmSetWindowAttribute DwmGetWindowAttribute DwmGetCompositionTimingInfo

imm32

ImmSetCompositionWindow ImmGetContext ImmReleaseContext ImmSetCandidateWindow ImmAssociateContext

Name

.text

Size

10.4MB

Virtual Size

10.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.9MB

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

729KB

Virtual Size

4.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

427KB

Virtual Size

427KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

151KB

Virtual Size

151KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

67KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.zhcn

Size

91KB

Virtual Size

90KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-31_2f6da23da104c8c45d132e24e3fefb60_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar

wininet

d3d11

dbghelp

winmm

ws2_32

gdiplus

comctl32

version

rpcrt4

iphlpapi

avrt

propsys

api-ms-win-core-path-l1-1-0

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

dwmapi

imm32

generic