General
- Target 2026-08-04_04e5ffc439025d627e44b59bac475cb9_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar
- Size 1.8MB
- Sample260804-khfgdabl3x
- SHA256 683df5b9e9cbc36536f06e205f2fe244e0da1a75beaad2d433d290ab83e3153b
- MD5 04e5ffc439025d627e44b59bac475cb9
- SHA1 5dd979f2be3255e2b1bc97b0ab18461c22a16b68
- SHA512 aa19019250025c627516d7699808c1ff7d5a1713501bfaf33eb48bc9d805b03e9ed054139f91e07a5ebdeab2fc0267397aec09fa4f018a1d5a122183d7684e35
- SSDEEP 24576:EZeukrojve+d8lmOQ8lH+c4BOh9rwBKh/ywul+x1JHdCWVO4dFP0en1hh:EAkTe+d8lTHJ9rGW/j2+x1JHoKO89F
- TLSH T1E895BF0773E6C0F5DA7B81B9C5624622EB7174610B248BDF36A4462EDF63BD04E3AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-04_04e5ffc439025d627e44b59bac475cb9_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_04e5ffc439025d627e44b59bac475cb9_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_04e5ffc439025d627e44b59bac475cb9_amadey_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar
- Size 1.8MB
- SHA256 683df5b9e9cbc36536f06e205f2fe244e0da1a75beaad2d433d290ab83e3153b
- MD5 04e5ffc439025d627e44b59bac475cb9
- SHA1 5dd979f2be3255e2b1bc97b0ab18461c22a16b68
- SHA512 aa19019250025c627516d7699808c1ff7d5a1713501bfaf33eb48bc9d805b03e9ed054139f91e07a5ebdeab2fc0267397aec09fa4f018a1d5a122183d7684e35
- SSDEEP 24576:EZeukrojve+d8lmOQ8lH+c4BOh9rwBKh/ywul+x1JHdCWVO4dFP0en1hh:EAkTe+d8lTHJ9rGW/j2+x1JHoKO89F
- TLSH T1E895BF0773E6C0F5DA7B81B9C5624622EB7174610B248BDF36A4462EDF63BD04E3AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables Discord URL observed in first stage droppers
-
Detects executables containing URLs to raw contents of a Github gist