General
- Target 2026-08-03_024d51c044c5d2524d7e0c8b0f4d753b_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 14.4MB
- Sample260804-qg8dna1fkb
- SHA256 754f06b2439655670cfb69786964061b9ed5bfc1609cd82489893d415ee96536
- MD5 024d51c044c5d2524d7e0c8b0f4d753b
- SHA1 9129e971c9b6ca04150c7091f17d81320f6c0ffe
- SHA512 5ebeb5ea4e952e2d914bfa8de7758686d79ee988a1e9b9b309e9f986e6fcf3ecf61a4ef0fcf85372dbae323563058cf486d0930bfd86e6a501d6d008d4448bdd
- SSDEEP 196608:cv2z/7hQW33tEFDUpQ5/ISpCsXDjDyfVW3q+09iq2pPepZkNnNMvoPa4B+L7Nws2:rhQu9dM/ISpCEDmlh2pSZk1i4wZPIFo
- TLSH T16DE63308B261445AFC77113AC565C2319AB9FCBF07A2D98F0AD21D473FD36A92E3C691
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_024d51c044c5d2524d7e0c8b0f4d753b_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_024d51c044c5d2524d7e0c8b0f4d753b_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_024d51c044c5d2524d7e0c8b0f4d753b_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 14.4MB
- SHA256 754f06b2439655670cfb69786964061b9ed5bfc1609cd82489893d415ee96536
- MD5 024d51c044c5d2524d7e0c8b0f4d753b
- SHA1 9129e971c9b6ca04150c7091f17d81320f6c0ffe
- SHA512 5ebeb5ea4e952e2d914bfa8de7758686d79ee988a1e9b9b309e9f986e6fcf3ecf61a4ef0fcf85372dbae323563058cf486d0930bfd86e6a501d6d008d4448bdd
- SSDEEP 196608:cv2z/7hQW33tEFDUpQ5/ISpCsXDjDyfVW3q+09iq2pPepZkNnNMvoPa4B+L7Nws2:rhQu9dM/ISpCEDmlh2pSZk1i4wZPIFo
- TLSH T16DE63308B261445AFC77113AC565C2319AB9FCBF07A2D98F0AD21D473FD36A92E3C691
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.