General
- Target 2026-08-04_fb4696ffc47abd86204e317bae5dff25_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 82.1MB
- Sample260804-fev1fadb77
- SHA256 521aa7bc5898cd00ce8fe37e0f646524ffb0b8d3242c3cd6a3e716aaf4a6f805
- MD5 fb4696ffc47abd86204e317bae5dff25
- SHA1 40c1cf6b55df921468b886bdcf395a01b1605a37
- SHA512 56ff8db35a513bdac1895a3535df1fb6401f04c7995748c4ab1a08387324aab835dd09cd85d8681b5f9ab70dff34d6e4cfe9a8d22c47a435f58960a677a7906d
- SSDEEP 1572864:o9zdOKV7q0izHUb9jETHPQmMpnx9lMHY7otnq/2vNiI2aoeZ6vUMrWUC7c/qhfk1:o9F5jcvPOn3QhBCeZ6vUEk76JZ
- TLSH T16A18334C63814C4DE694933357A69E446EB6E84E076EC84F6BE938202D4F3DBC63DC96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-04_fb4696ffc47abd86204e317bae5dff25_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_fb4696ffc47abd86204e317bae5dff25_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_fb4696ffc47abd86204e317bae5dff25_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 82.1MB
- SHA256 521aa7bc5898cd00ce8fe37e0f646524ffb0b8d3242c3cd6a3e716aaf4a6f805
- MD5 fb4696ffc47abd86204e317bae5dff25
- SHA1 40c1cf6b55df921468b886bdcf395a01b1605a37
- SHA512 56ff8db35a513bdac1895a3535df1fb6401f04c7995748c4ab1a08387324aab835dd09cd85d8681b5f9ab70dff34d6e4cfe9a8d22c47a435f58960a677a7906d
- SSDEEP 1572864:o9zdOKV7q0izHUb9jETHPQmMpnx9lMHY7otnq/2vNiI2aoeZ6vUMrWUC7c/qhfk1:o9F5jcvPOn3QhBCeZ6vUEk76JZ
- TLSH T16A18334C63814C4DE694933357A69E446EB6E84E076EC84F6BE938202D4F3DBC63DC96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.