General
- Target 2026-08-01_0a842a610f0591abfc6ffa77d57ffb2e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 27.4MB
- Sample260801-rtb2nacl5z
- SHA256 17c773cc9f6eef2b888b00cca7822b8566e59d5a365833d7f27676026c645ad7
- MD5 0a842a610f0591abfc6ffa77d57ffb2e
- SHA1 d5c6cce07323c7edb9c61d6bce034ec04157e5c9
- SHA512 ef98ae1ea30370dae74ee4f236c2f1dc05efd7bd8274b0f154be6cb629910259c3caf8723c0d9b65596581305c1293f452ad546780158188553d428bf436c633
- SSDEEP 786432:/7M5l5b0sLLsKMMo5ovsVuRBHstlm0/aglaO:/7GbIoeOBMLm0pl
- TLSH T1E45733D4615488A2C5D501B94663A3619CE7F4224789C6CFE3FCA3476DAB3F06A7BF80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-01_0a842a610f0591abfc6ffa77d57ffb2e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_0a842a610f0591abfc6ffa77d57ffb2e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_0a842a610f0591abfc6ffa77d57ffb2e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 27.4MB
- SHA256 17c773cc9f6eef2b888b00cca7822b8566e59d5a365833d7f27676026c645ad7
- MD5 0a842a610f0591abfc6ffa77d57ffb2e
- SHA1 d5c6cce07323c7edb9c61d6bce034ec04157e5c9
- SHA512 ef98ae1ea30370dae74ee4f236c2f1dc05efd7bd8274b0f154be6cb629910259c3caf8723c0d9b65596581305c1293f452ad546780158188553d428bf436c633
- SSDEEP 786432:/7M5l5b0sLLsKMMo5ovsVuRBHstlm0/aglaO:/7GbIoeOBMLm0pl
- TLSH T1E45733D4615488A2C5D501B94663A3619CE7F4224789C6CFE3FCA3476DAB3F06A7BF80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.