General
- Target 2026-08-05_ac7a167ee7269bd790f220bb104cca22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.4MB
- Sample260805-2bcwcahj8s
- SHA256 cee89827f4e8e7e32ec9f0b484586283cd7e345bfa06f458ce631d4fa9c098bc
- MD5 ac7a167ee7269bd790f220bb104cca22
- SHA1 33f3def13a12a671b3ce3f4d4d4d4b4bc1277e3e
- SHA512 6709fea3c4e8759e8ad5e62aed6cc4c8812129ccdcb5316051a2197de46f1e259ce2f0b57f06b8c8cacd5264d6a55bf60d4b55b00d4017d725e95c7ea4ebbb8f
- SSDEEP 24576:W1LEgeK1zQt30+kt/z0VMOYeU7x52K5vip6hXpCN1pqVJbHuVIJAEvrodiodk:O39VQBWaVMOYeU7x52KhB2w7bOVID7
- TLSH T1F1656D17B2A510E9D07AC179CA665112EA71BC550730AADF17E067262F33FE0AF3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-05_ac7a167ee7269bd790f220bb104cca22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_ac7a167ee7269bd790f220bb104cca22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_ac7a167ee7269bd790f220bb104cca22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.4MB
- SHA256 cee89827f4e8e7e32ec9f0b484586283cd7e345bfa06f458ce631d4fa9c098bc
- MD5 ac7a167ee7269bd790f220bb104cca22
- SHA1 33f3def13a12a671b3ce3f4d4d4d4b4bc1277e3e
- SHA512 6709fea3c4e8759e8ad5e62aed6cc4c8812129ccdcb5316051a2197de46f1e259ce2f0b57f06b8c8cacd5264d6a55bf60d4b55b00d4017d725e95c7ea4ebbb8f
- SSDEEP 24576:W1LEgeK1zQt30+kt/z0VMOYeU7x52K5vip6hXpCN1pqVJbHuVIJAEvrodiodk:O39VQBWaVMOYeU7x52KhB2w7bOVID7
- TLSH T1F1656D17B2A510E9D07AC179CA665112EA71BC550730AADF17E067262F33FE0AF3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE