General
- Target 2026-08-01_b931d60d2eeef0bc4d6edc78bc037ce7_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 6.1MB
- Sample260801-3ynrsszthv
- SHA256 a340874205b2be4690dbb738b8eb883dcb496db2f247d936f9afcc05f60ff0d0
- MD5 b931d60d2eeef0bc4d6edc78bc037ce7
- SHA1 4cb42d5ea545bbf02b40db259a0b671c724d838c
- SHA512 3e73dee1bca8f67e9be351946d9387277acfbcd8947b91840c26b8e79cdc8d9b6b1dcd20a0cbbe1ef82f34f06b997cdbb13a45b4c129c59e87f7c79b355372b9
- SSDEEP 196608:shzGJMCsXDjDyf/dJolpPgToa10/jXCwFOnJfjQzpU:Qz4MCEDCJ83a10byws9qp
- TLSH T1E0563384A5C119E9ED63A13E8D518951CAB23CB61321C75F4A7403772E3BBA48D7EF43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-01_b931d60d2eeef0bc4d6edc78bc037ce7_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_b931d60d2eeef0bc4d6edc78bc037ce7_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 6.1MB
- SHA256 a340874205b2be4690dbb738b8eb883dcb496db2f247d936f9afcc05f60ff0d0
- MD5 b931d60d2eeef0bc4d6edc78bc037ce7
- SHA1 4cb42d5ea545bbf02b40db259a0b671c724d838c
- SHA512 3e73dee1bca8f67e9be351946d9387277acfbcd8947b91840c26b8e79cdc8d9b6b1dcd20a0cbbe1ef82f34f06b997cdbb13a45b4c129c59e87f7c79b355372b9
- SSDEEP 196608:shzGJMCsXDjDyf/dJolpPgToa10/jXCwFOnJfjQzpU:Qz4MCEDCJ83a10byws9qp
- TLSH T1E0563384A5C119E9ED63A13E8D518951CAB23CB61321C75F4A7403772E3BBA48D7EF43
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL