General

  • Target
    2026-08-02_29b6532b70438b1f49ac92a127765316_cobalt-strike_glassworm_icedid_njrat_stealc
  • Size 12.1MB
  • Sample260802-g2txbsvsgx
  • SHA256 ffa8034443623066b044392f85390845422a8974f3a2f60cef59eca8f4e61310
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-08-02_29b6532b70438b1f49ac92a127765316_cobalt-strike_glassworm_icedid_njrat_stealc
    .exe 12.1MB

2026-08-02_29b6532b70438b1f49ac92a127765316_cobalt-strike_glassworm_icedid_njrat_stealc

  • IMPHASH bafabd3287b4ee73cb3cf8236de69d34
  • SHA256 ffa8034443623066b044392f85390845422a8974f3a2f60cef59eca8f4e61310
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f8:8d:d4:b2:8b:61:bb:f6:3a:27:3b:39:07:e1:01:d2:e5:1b:c1:7c:5b:32:86:b3:cc:54:84:fe:89:a4:9b:99
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=HRB 110119,CN=Skutta Software GmbH,O=Skutta Software GmbH,L=Leverkusen,ST=Nordrhein-Westfalen,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c054bc3b66c6e,1.3.6.1.4.1.311.60.2.1.2=#13134e6f7264726865696e2d5765737466616c656e,1.3.6.1.4.1.311.60.2.1.3=#13024445
Minor OS version
0
Major OS version
6
Entry point
5430032
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
wallpaperui.pdb