General
- Target 2026-08-07_3962162cf699de0e71c7d6bd389b3385_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 13.1MB
- Sample260808-byhf8sxema
- SHA256 1b1d9668cc1f929b28917c8af141f118d524241a7c21253d7ea4b3b2aae21832
- MD5 3962162cf699de0e71c7d6bd389b3385
- SHA1 817cd2e1c27c44f36d3d290e88ae5d61cba18d2a
- SHA512 df8763ce0095040cb0f9080eb7111b756295293ed27eda6e295d509f193467a381ad414bf65b2a58a7b1cb1e2154aa8faa6f7035d05f94bb153034d06dd86820
- SSDEEP 49152:6BojvOvDv0jB+O93+xG96G9Cb3NmGUdO7m9buq7M9c0zVG/mr4/YaX2:jecruQ9Cb3N3noo6CVCdQam
- TLSH T174D6F156A3A414FAD1B7C179C9438613E7B2BC5603209BDF03A09A692F337D56E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-07_3962162cf699de0e71c7d6bd389b3385_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_3962162cf699de0e71c7d6bd389b3385_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_3962162cf699de0e71c7d6bd389b3385_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 13.1MB
- SHA256 1b1d9668cc1f929b28917c8af141f118d524241a7c21253d7ea4b3b2aae21832
- MD5 3962162cf699de0e71c7d6bd389b3385
- SHA1 817cd2e1c27c44f36d3d290e88ae5d61cba18d2a
- SHA512 df8763ce0095040cb0f9080eb7111b756295293ed27eda6e295d509f193467a381ad414bf65b2a58a7b1cb1e2154aa8faa6f7035d05f94bb153034d06dd86820
- SSDEEP 49152:6BojvOvDv0jB+O93+xG96G9Cb3NmGUdO7m9buq7M9c0zVG/mr4/YaX2:jecruQ9Cb3N3noo6CVCdQam
- TLSH T174D6F156A3A414FAD1B7C179C9438613E7B2BC5603209BDF03A09A692F337D56E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing many IR and analysis tools
-
Deletes itself
-
Executes dropped EXE
-
Stops running service(s)