General
- Target 2026-08-09_ac8138e718edfe6155301041937a7d9d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.5MB
- Sample260809-q58dkayflc
- SHA256 2c2541f6a3a7615ad186fe2fbe960b187d129b6bd2c904f596eb8c1007449c64
- MD5 ac8138e718edfe6155301041937a7d9d
- SHA1 301a8cf4ba657445df0264907f9b8046c39006b7
- SHA512 8f5a11fc7864aed5a3eab56289ca1738789edb6849b36e9242815ef74aca082d4bc404dfc37af66d80ee98bcdcd61e283e92d61cf9256c91b19137033ea74e54
- SSDEEP 24576:i1LEgeK1zwt303IOlmISDVTv6VnWOB2LbjpfRpPsI9BDUpKS8b1EAe76Xyodyod:K39VwBGS3VTv6VnWOB2Lf/T4pj8bXe
- TLSH T1B3656C1BB29510E9D07AC178CA665112FA71BC550730AADF17E067262F37BE0AF3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_ac8138e718edfe6155301041937a7d9d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_ac8138e718edfe6155301041937a7d9d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_ac8138e718edfe6155301041937a7d9d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.5MB
- SHA256 2c2541f6a3a7615ad186fe2fbe960b187d129b6bd2c904f596eb8c1007449c64
- MD5 ac8138e718edfe6155301041937a7d9d
- SHA1 301a8cf4ba657445df0264907f9b8046c39006b7
- SHA512 8f5a11fc7864aed5a3eab56289ca1738789edb6849b36e9242815ef74aca082d4bc404dfc37af66d80ee98bcdcd61e283e92d61cf9256c91b19137033ea74e54
- SSDEEP 24576:i1LEgeK1zwt303IOlmISDVTv6VnWOB2LbjpfRpPsI9BDUpKS8b1EAe76Xyodyod:K39VwBGS3VTv6VnWOB2Lf/T4pj8bXe
- TLSH T1B3656C1BB29510E9D07AC178CA665112FA71BC550730AADF17E067262F37BE0AF3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE