General
- Target 2026-08-05_d17dd715a46d159eb294db2c4b414e83_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 1005KB
- Sample260805-ls68hsvaqh
- SHA256 a1f7331c00543eb73eb1cb5b0b41eec9877b8fc67f5cdb2c9746efd3d7496b55
- MD5 d17dd715a46d159eb294db2c4b414e83
- SHA1 b1de49137bbd3d6cec08228a82d48503243150f7
- SHA512 27c81735258c2eba6cc032a6b6f8ab603d335e23c201436b632e644692fa247e60eb7d7bcc9ba4b95e007f3ab38609e7edc03bb4a4894ac4fcc00e3e79700288
- SSDEEP 24576:6hLAyovYFXM2wx7Pvk04GhUqZuaS94k1:6XovYFXM2wx7Xk04kZuNa
- TLSH T1A5256C062B951278D066D23CC9579827E6767C1B43B595EF03D0B9A73F322E06E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-05_d17dd715a46d159eb294db2c4b414e83_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_d17dd715a46d159eb294db2c4b414e83_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_d17dd715a46d159eb294db2c4b414e83_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 1005KB
- SHA256 a1f7331c00543eb73eb1cb5b0b41eec9877b8fc67f5cdb2c9746efd3d7496b55
- MD5 d17dd715a46d159eb294db2c4b414e83
- SHA1 b1de49137bbd3d6cec08228a82d48503243150f7
- SHA512 27c81735258c2eba6cc032a6b6f8ab603d335e23c201436b632e644692fa247e60eb7d7bcc9ba4b95e007f3ab38609e7edc03bb4a4894ac4fcc00e3e79700288
- SSDEEP 24576:6hLAyovYFXM2wx7Pvk04GhUqZuaS94k1:6XovYFXM2wx7Xk04kZuNa
- TLSH T1A5256C062B951278D066D23CC9579827E6767C1B43B595EF03D0B9A73F322E06E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
UPX dump on OEP (original entry point)