General
- Target 2026-08-07_7bcfd2d585ffcc5e1d20736eddf1f1e4_cobalt-strike_glassworm_icedid_luca-stealer_njrat_ryuk_satacom_stealc_vidar_xworm
- Size 622KB
- Sample260807-tbdtmsyfpd
- SHA256 3aab8e1cc6201e14b42ab545206652f69ca911b911a2b366e34e271985a4cc27
- MD5 7bcfd2d585ffcc5e1d20736eddf1f1e4
- SHA1 8f14d37c6a9de9208226038fa46aaaf122649aa1
- SHA512 5d001c2c38bd0611b695eb3dbb4820a12d5d76b95b86ba715d91695383c256c84abf045f050796ac45afbda86d86f1ddf9e1649e493416cabb90eb06bdf96d52
- SSDEEP 12288:dYCDi50NiQDuysMFZzN/E/msup7sVHDmD+0wJ1BwM+e:e93gT+HDfaM+e
- TLSH T15BD46C02F75C3CFDD066C13489B24592AB35FC661B60AADF179467262E332E1BE39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-07_7bcfd2d585ffcc5e1d20736eddf1f1e4_cobalt-strike_glassworm_icedid_luca-stealer_njrat_ryuk_s.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_7bcfd2d585ffcc5e1d20736eddf1f1e4_cobalt-strike_glassworm_icedid_luca-stealer_njrat_ryuk_s.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_7bcfd2d585ffcc5e1d20736eddf1f1e4_cobalt-strike_glassworm_icedid_luca-stealer_njrat_ryuk_satacom_stealc_vidar_xworm
- Size 622KB
- SHA256 3aab8e1cc6201e14b42ab545206652f69ca911b911a2b366e34e271985a4cc27
- MD5 7bcfd2d585ffcc5e1d20736eddf1f1e4
- SHA1 8f14d37c6a9de9208226038fa46aaaf122649aa1
- SHA512 5d001c2c38bd0611b695eb3dbb4820a12d5d76b95b86ba715d91695383c256c84abf045f050796ac45afbda86d86f1ddf9e1649e493416cabb90eb06bdf96d52
- SSDEEP 12288:dYCDi50NiQDuysMFZzN/E/msup7sVHDmD+0wJ1BwM+e:e93gT+HDfaM+e
- TLSH T15BD46C02F75C3CFDD066C13489B24592AB35FC661B60AADF179467262E332E1BE39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association