General
- Target 2026-08-04_7f5239b5a30f1e0e4fc85f449432767e_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat_remcos_ryuk_satacom_smoke-loader_stealc_vidar_xworm
- Size 589KB
- Sample260804-hd8agsee55
- SHA256 c7b479c26257929ff468eafe85c9605716f9af1ceda84c605c86b1f191f7d8f1
- MD5 7f5239b5a30f1e0e4fc85f449432767e
- SHA1 1b051489e55629d4d4adc2528b6015ce99df9090
- SHA512 3a01f53528f003d476ba64d79e6b9c65e5701dffbc0c0e2b866279f5eb2458bea001752b600d59d565bb35c8c1cb75a3ff9841c6c2fa4f19008e6f654cbc8abd
- SSDEEP 12288:pYCDi50NiQOuysMFZzN/E/msup7smrbA62A+xy4rvx+aFSy:69ogTfrbr+I4rvxLEy
- TLSH T110D4AF11F79144F5D4B7853449E256629E39BCAA0B31EEEF13D8432A1F327E08E39B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_7f5239b5a30f1e0e4fc85f449432767e_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_7f5239b5a30f1e0e4fc85f449432767e_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_7f5239b5a30f1e0e4fc85f449432767e_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat_remcos_ryuk_satacom_smoke-loader_stealc_vidar_xworm
- Size 589KB
- SHA256 c7b479c26257929ff468eafe85c9605716f9af1ceda84c605c86b1f191f7d8f1
- MD5 7f5239b5a30f1e0e4fc85f449432767e
- SHA1 1b051489e55629d4d4adc2528b6015ce99df9090
- SHA512 3a01f53528f003d476ba64d79e6b9c65e5701dffbc0c0e2b866279f5eb2458bea001752b600d59d565bb35c8c1cb75a3ff9841c6c2fa4f19008e6f654cbc8abd
- SSDEEP 12288:pYCDi50NiQOuysMFZzN/E/msup7smrbA62A+xy4rvx+aFSy:69ogTfrbr+I4rvxLEy
- TLSH T110D4AF11F79144F5D4B7853449E256629E39BCAA0B31EEEF13D8432A1F327E08E39B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association