General
- Target 2026-08-04_67b8c3cf0e98d113854959d3ad542d78_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat_ryuk_satacom_smoke-loader_stealc_vidar_xworm
- Size 602KB
- Sample260804-hr1gsstdkb
- SHA256 96d133faf6302772d1229f35d78ea583691c4720e2c711252c293832f8d2d77e
- MD5 67b8c3cf0e98d113854959d3ad542d78
- SHA1 1e3af33168edc9c7532049a2d5517aeab9cb2121
- SHA512 42ce3a2b24611203b1e58e8e55f9dd46bc1f4590e8569226e5651c93fe01b39709429e2ca1a07b31b4cf8fc78586d892b7f4ac447a2518522dcbc575f4598e64
- SSDEEP 12288:pYCDi50NiQOuysMFZzN/E/msup7sFG7X+xErtP5iW9JuZIsJFKRx+b2o:69ogTEG7uaB5ibFKRxe
- TLSH T1D8D49E15F7E504F5D4A6C1748AE186629A39BCA60B31DEEF17C807291F337E08D3AB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_67b8c3cf0e98d113854959d3ad542d78_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_67b8c3cf0e98d113854959d3ad542d78_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_67b8c3cf0e98d113854959d3ad542d78_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat_ryuk_satacom_smoke-loader_stealc_vidar_xworm
- Size 602KB
- SHA256 96d133faf6302772d1229f35d78ea583691c4720e2c711252c293832f8d2d77e
- MD5 67b8c3cf0e98d113854959d3ad542d78
- SHA1 1e3af33168edc9c7532049a2d5517aeab9cb2121
- SHA512 42ce3a2b24611203b1e58e8e55f9dd46bc1f4590e8569226e5651c93fe01b39709429e2ca1a07b31b4cf8fc78586d892b7f4ac447a2518522dcbc575f4598e64
- SSDEEP 12288:pYCDi50NiQOuysMFZzN/E/msup7sFG7X+xErtP5iW9JuZIsJFKRx+b2o:69ogTEG7uaB5ibFKRxe
- TLSH T1D8D49E15F7E504F5D4A6C1748AE186629A39BCA60B31DEEF17C807291F337E08D3AB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association