General
- Target 2026-08-09_91a5c5ebcb27abee41500c2637022de1_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 3.5MB
- Sample260809-l1m5lsvgnf
- SHA256 8e690b866307dd36ac0a36c44af5e491a0975e4c1d6a584cbc83d36e853aef92
- MD5 91a5c5ebcb27abee41500c2637022de1
- SHA1 5785631ba2e99b72e21b471eec06f116201d0dc0
- SHA512 71ef59bb57d926f8e0a500499b0c5f13fbdb69078da412f4a555f7adf5eaee84ade3b8f06023a8e950605668aa67e7a82ba5e9f44854334a37423574d4eba457
- SSDEEP 49152:xC6UNgWsZ6H5aat0VXtD7bS9hUfq/TSQKowr1JHOS:2LsEHpU
- TLSH T1E1F5AE7A966610FEE0A6C574C9031917EF367807033596CB9AC0957A6F67AF08E3E730
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
5 signatures
Behavioral task
behavioral1
Sample
2026-08-09_91a5c5ebcb27abee41500c2637022de1_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_91a5c5ebcb27abee41500c2637022de1_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_91a5c5ebcb27abee41500c2637022de1_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 3.5MB
- SHA256 8e690b866307dd36ac0a36c44af5e491a0975e4c1d6a584cbc83d36e853aef92
- MD5 91a5c5ebcb27abee41500c2637022de1
- SHA1 5785631ba2e99b72e21b471eec06f116201d0dc0
- SHA512 71ef59bb57d926f8e0a500499b0c5f13fbdb69078da412f4a555f7adf5eaee84ade3b8f06023a8e950605668aa67e7a82ba5e9f44854334a37423574d4eba457
- SSDEEP 49152:xC6UNgWsZ6H5aat0VXtD7bS9hUfq/TSQKowr1JHOS:2LsEHpU
- TLSH T1E1F5AE7A966610FEE0A6C574C9031917EF367807033596CB9AC0957A6F67AF08E3E730
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.
-
Detects binaries and memory artifacts referencing sandbox DLLs typically observed in sandbox evasion
-
Detects binaries and memory artifacts referencing sandbox product IDs
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers