General
- Target 2026-08-04_ac17b70c91db62db3a088e4c96f74d2c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 1.4MB
- Sample260804-gl9mvadh96
- SHA256 f64acc870126da9020d3eff51c2947f094c5bd994115a168682e703efe033b32
- MD5 ac17b70c91db62db3a088e4c96f74d2c
- SHA1 48ee5be00040bab53b442cf01da95a7f7f86786b
- SHA512 95731f693b944d9a394a575d7e7c8cdf5418871cd3583d0c3e50aa9b25ce0a1d198eda70ec4473282b175b4f2a7d41e2654a57e01a9fce2f572f88763803a8ac
- SSDEEP 24576:693ge9Ej5DrfzXdaxgAOZGspkqLCVHpZktAIn1brR7ZHFGjbhDZlnN:DYiNXdaxgAOZDp/Avkz1brR1HF69HN
- TLSH T1D2650201F79404F8E4F78A3485A645919E39FC9A0B71EADF13C8462D1F727E09E39B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_ac17b70c91db62db3a088e4c96f74d2c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_ac17b70c91db62db3a088e4c96f74d2c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_remcos.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_ac17b70c91db62db3a088e4c96f74d2c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 1.4MB
- SHA256 f64acc870126da9020d3eff51c2947f094c5bd994115a168682e703efe033b32
- MD5 ac17b70c91db62db3a088e4c96f74d2c
- SHA1 48ee5be00040bab53b442cf01da95a7f7f86786b
- SHA512 95731f693b944d9a394a575d7e7c8cdf5418871cd3583d0c3e50aa9b25ce0a1d198eda70ec4473282b175b4f2a7d41e2654a57e01a9fce2f572f88763803a8ac
- SSDEEP 24576:693ge9Ej5DrfzXdaxgAOZGspkqLCVHpZktAIn1brR7ZHFGjbhDZlnN:DYiNXdaxgAOZDp/Avkz1brR1HF69HN
- TLSH T1D2650201F79404F8E4F78A3485A645919E39FC9A0B71EADF13C8462D1F727E09E39B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association