General
- Target 2026-07-31_f222923fed51f289a174bf0a3e88f775_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar
- Size 506KB
- Sample260731-qpljvsterb
- SHA256 2866ea6e8001c29faebb3bbe9f8c2dcc006926eb026e8e127a85da23b5ed32e5
- MD5 f222923fed51f289a174bf0a3e88f775
- SHA1 6da841d932bc1843d34abac52e80a4b4779f0d14
- SHA512 92733567eeffddb734b340631250817ca9b28f5934217a29c2c6d85f859e9e2c81498e20e5583541fbcd1745c6229d817655d789e6912b895ba1b74bfe704c1e
- SSDEEP 12288:XJKfMHdzS9ZW9nKZbnmb4Jb2QxbD9aJb2fybwpj0BSRMfNw+RMfjc7b1rokbSMfo:XJKUHdVoQE
- TLSH T188B48D16F7A410BAD477857889538A06E73278430750CBDF37AC06AA6F637E09F3AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_f222923fed51f289a174bf0a3e88f775_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_f222923fed51f289a174bf0a3e88f775_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_f222923fed51f289a174bf0a3e88f775_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar
- Size 506KB
- SHA256 2866ea6e8001c29faebb3bbe9f8c2dcc006926eb026e8e127a85da23b5ed32e5
- MD5 f222923fed51f289a174bf0a3e88f775
- SHA1 6da841d932bc1843d34abac52e80a4b4779f0d14
- SHA512 92733567eeffddb734b340631250817ca9b28f5934217a29c2c6d85f859e9e2c81498e20e5583541fbcd1745c6229d817655d789e6912b895ba1b74bfe704c1e
- SSDEEP 12288:XJKfMHdzS9ZW9nKZbnmb4Jb2QxbD9aJb2fybwpj0BSRMfNw+RMfjc7b1rokbSMfo:XJKUHdVoQE
- TLSH T188B48D16F7A410BAD477857889538A06E73278430750CBDF37AC06AA6F637E09F3AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.