General
- Target 2026-08-04_3f2a0992cccd1bc61743ba85c50925ad_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 1005KB
- Sample260804-tjcljsssav
- SHA256 61483ee1ab0a741a8c7dd66f16bc4c2a9bef502d22c09d687289d2761d3f6bbe
- MD5 3f2a0992cccd1bc61743ba85c50925ad
- SHA1 d2493ab2ecc6354c8d29f7b51f5606409ac7dafb
- SHA512 caffc4328b53126da6b64d6b3efde903a714f66a686054e0b48d68f4ac707a616cb08b4351cc789712b8a37bb41fe9a1a653e9b98d7a70771c6bab381de5dc1f
- SSDEEP 12288:puOLxmyoicc/jYoXM2wx7PfEWBh+0TGxdGhUHKZJybHoDI4yly8:phLAyovYFXM2wx7Pvk04GhUqZuHWI4o
- TLSH T1D9255C066A950278E066D13CC9579923E5767C1B43B599EF03D0F9A73F322E06B3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_3f2a0992cccd1bc61743ba85c50925ad_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_3f2a0992cccd1bc61743ba85c50925ad_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_3f2a0992cccd1bc61743ba85c50925ad_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 1005KB
- SHA256 61483ee1ab0a741a8c7dd66f16bc4c2a9bef502d22c09d687289d2761d3f6bbe
- MD5 3f2a0992cccd1bc61743ba85c50925ad
- SHA1 d2493ab2ecc6354c8d29f7b51f5606409ac7dafb
- SHA512 caffc4328b53126da6b64d6b3efde903a714f66a686054e0b48d68f4ac707a616cb08b4351cc789712b8a37bb41fe9a1a653e9b98d7a70771c6bab381de5dc1f
- SSDEEP 12288:puOLxmyoicc/jYoXM2wx7PfEWBh+0TGxdGhUHKZJybHoDI4yly8:phLAyovYFXM2wx7Pvk04GhUqZuHWI4o
- TLSH T1D9255C066A950278E066D13CC9579923E5767C1B43B599EF03D0F9A73F322E06B3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
UPX dump on OEP (original entry point)