Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
06/08/2026, 06:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe
- Size 1.3MB
- Sample260806-hea2dagc66
- SHA256 8412d811c2a95d764a109dcc171da52b6425821f5cb44f095e82cd4eba2ccdb5
- MD5 9fe524a2be99edf3bc145d2993781e22
- SHA1 c51cc704456de938d3d74f0dae5173ad4a8aff9e
- SHA512 60de432957bd7be2ceb9a8b0afc955095c2a0e6d51df09fc262a6f695c0d09cc1a3b35730cd8d181b0029fcc23351fa523d463f13c4ae7b228a1ac7d46435501
- SSDEEP 24576:lz7R7VxqJd1wHbGB8AV/sEBCaQIDEF+Rst2szHdPt5V5UG8zi48:lkdWHb68AV/sEB3rA7dl5nUTz4
- TLSH T11A559F0773F6C1E5CEBB81F6C9214623EA71B864073886DB2594852EEF63BD05E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe - Suspicious use of FindShellTrayWindow 4 IoCs
pid Process 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe - Suspicious use of SendNotifyMessage 4 IoCs
pid Process 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe - Suspicious use of SetWindowsHookEx 56 IoCs
pid Process 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe 1760 2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-06_9fe524a2be99edf3bc145d2993781e22_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1760