General
- Target 2026-08-03_899620f4a7f6f54656c5ac5d4c4001b8_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 6.0MB
- Sample260804-m2sxxsdk2s
- SHA256 b111b8d9d4248fbea87188444890d3a284bb3d3b26146d2ffe0b5a2b3fc13569
- MD5 899620f4a7f6f54656c5ac5d4c4001b8
- SHA1 946bd8e736940782dc1b2274dc69ec9960af473a
- SHA512 4314ee18e158bf090e932851ab14a00fa43022e31433bd64007eb888a96a6e6a8136f58550e32b1b319c9f05ae1447539ed5b45f65fa093453d9d662894fa4ef
- SSDEEP 49152:Nb6LgA97HrsdochZVNhcOgs0F2oHN8kVpiux7TLbT+sMPHpKtpVUoNwyp21INm1k:JA91pH2WpjHrgBFFu416AWv
- TLSH T14C564AA562E720FDE0AFE179893A8732E6B17C530131530F167CD6562FA36286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_899620f4a7f6f54656c5ac5d4c4001b8_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_899620f4a7f6f54656c5ac5d4c4001b8_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 6.0MB
- SHA256 b111b8d9d4248fbea87188444890d3a284bb3d3b26146d2ffe0b5a2b3fc13569
- MD5 899620f4a7f6f54656c5ac5d4c4001b8
- SHA1 946bd8e736940782dc1b2274dc69ec9960af473a
- SHA512 4314ee18e158bf090e932851ab14a00fa43022e31433bd64007eb888a96a6e6a8136f58550e32b1b319c9f05ae1447539ed5b45f65fa093453d9d662894fa4ef
- SSDEEP 49152:Nb6LgA97HrsdochZVNhcOgs0F2oHN8kVpiux7TLbT+sMPHpKtpVUoNwyp21INm1k:JA91pH2WpjHrgBFFu416AWv
- TLSH T14C564AA562E720FDE0AFE179893A8732E6B17C530131530F167CD6562FA36286D29733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.