General
- Target 2026-08-04_bf10d2e6e5d1c4f054826660c7220b9c_cobalt-strike_darkgate_glassworm_icedid_luca-stealer_njrat_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 687KB
- Sample260804-gawlvawzbv
- SHA256 126dc70b211c9594745ea3a049a6be303f44b1a7832628a18b64eb510c7fefe8
- MD5 bf10d2e6e5d1c4f054826660c7220b9c
- SHA1 24942f336af82c4e5333dd149bf88a0d5c934260
- SHA512 e8e871510825dca89882bc920e3b01e106cb2355663e65bdf3a781c1e808d0e5f5e226775bbbfd228871b1b53e5a273cc04e3d4f49130e4c98834a11368357fe
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msuY7sq/TUALF0QstO/+9EiFb4gexJAdGyC:693geP/zgOW9EcaxJ+RC
- TLSH T1AAE4BF12F7504CF4E467953489E686629E39FC9A0B31EADF13D8432A1F327E04E39B65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_bf10d2e6e5d1c4f054826660c7220b9c_cobalt-strike_darkgate_glassworm_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_bf10d2e6e5d1c4f054826660c7220b9c_cobalt-strike_darkgate_glassworm_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_bf10d2e6e5d1c4f054826660c7220b9c_cobalt-strike_darkgate_glassworm_icedid_luca-stealer_njrat_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 687KB
- SHA256 126dc70b211c9594745ea3a049a6be303f44b1a7832628a18b64eb510c7fefe8
- MD5 bf10d2e6e5d1c4f054826660c7220b9c
- SHA1 24942f336af82c4e5333dd149bf88a0d5c934260
- SHA512 e8e871510825dca89882bc920e3b01e106cb2355663e65bdf3a781c1e808d0e5f5e226775bbbfd228871b1b53e5a273cc04e3d4f49130e4c98834a11368357fe
- SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msuY7sq/TUALF0QstO/+9EiFb4gexJAdGyC:693geP/zgOW9EcaxJ+RC
- TLSH T1AAE4BF12F7504CF4E467953489E686629E39FC9A0B31EADF13D8432A1F327E04E39B65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association