General
- Target 2026-08-06_86ffd4058b1efd986aedfe144be4067e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.7MB
- Sample260806-btlyvsfb43
- SHA256 e960078242229173798816537350746552098e57ddb3a2adee1154ba07b14285
- MD5 86ffd4058b1efd986aedfe144be4067e
- SHA1 72091f4debb0a4cc589dda91daa493de690bca61
- SHA512 860726df97abb427a75aa23d63e5f8034d4a275a1a4208b1178572f194dc4600f4f3a1ad349ec9ff8567da437aa6d6d88d423cd20399eb5820cb6d445236283c
- SSDEEP 24576:CZUJFwHe13MZwt30GiC2iwMVHtpkZkctz2gazVfFCxBjk2kGi05aHSDwRodIodD:BUHu3gwB7ii5ctSgWqoaaHSDw4
- TLSH T18D859E17E6A510F9D4BBC13CCA425526FA71B8520770ABDF13905A662F23BE0AF3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-06_86ffd4058b1efd986aedfe144be4067e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_86ffd4058b1efd986aedfe144be4067e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_86ffd4058b1efd986aedfe144be4067e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.7MB
- SHA256 e960078242229173798816537350746552098e57ddb3a2adee1154ba07b14285
- MD5 86ffd4058b1efd986aedfe144be4067e
- SHA1 72091f4debb0a4cc589dda91daa493de690bca61
- SHA512 860726df97abb427a75aa23d63e5f8034d4a275a1a4208b1178572f194dc4600f4f3a1ad349ec9ff8567da437aa6d6d88d423cd20399eb5820cb6d445236283c
- SSDEEP 24576:CZUJFwHe13MZwt30GiC2iwMVHtpkZkctz2gazVfFCxBjk2kGi05aHSDwRodIodD:BUHu3gwB7ii5ctSgWqoaaHSDw4
- TLSH T18D859E17E6A510F9D4BBC13CCA425526FA71B8520770ABDF13905A662F23BE0AF3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE