General
- Target 2026-08-05_aefa0c287108abcfe07033604b9278d6_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 39.4MB
- Sample260805-jkweyasbmd
- SHA256 c146c61a100e5a2f18f93c69fe055f8d3253b3bd7aa300a5669639c08cd57695
- MD5 aefa0c287108abcfe07033604b9278d6
- SHA1 dc25bce783f6f163ee7c48c1fe89ed901b9fe89b
- SHA512 75f0b49831f921ac824783830e3b4d0a6d809074249fc420aad60865d9bdd21890727825b3f518ce0f66443ea0df015fd0931a362640da636be50ee167f50ab1
- SSDEEP 786432:kQ6n18tU6ayzBPhiiXM9TZpAyykMAblSUDTAyy9brK+sw+bJ2/8at5QxS6:kQE8tmSBZiiXM97lfcbi51SoS6
- TLSH T1AD97234BB29900EAC87AC03C8596954BF2723851037497EB37ED965A6F37BF11A3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-05_aefa0c287108abcfe07033604b9278d6_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_aefa0c287108abcfe07033604b9278d6_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_aefa0c287108abcfe07033604b9278d6_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 39.4MB
- SHA256 c146c61a100e5a2f18f93c69fe055f8d3253b3bd7aa300a5669639c08cd57695
- MD5 aefa0c287108abcfe07033604b9278d6
- SHA1 dc25bce783f6f163ee7c48c1fe89ed901b9fe89b
- SHA512 75f0b49831f921ac824783830e3b4d0a6d809074249fc420aad60865d9bdd21890727825b3f518ce0f66443ea0df015fd0931a362640da636be50ee167f50ab1
- SSDEEP 786432:kQ6n18tU6ayzBPhiiXM9TZpAyykMAblSUDTAyy9brK+sw+bJ2/8at5QxS6:kQE8tmSBZiiXM97lfcbi51SoS6
- TLSH T1AD97234BB29900EAC87AC03C8596954BF2723851037497EB37ED965A6F37BF11A3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.