General
- Target 2026-08-09_fff4614f9bdeb75f1101088505089195_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 14.4MB
- Sample260809-s37qcshl41
- SHA256 bbd6fc84b1deeb1ff6217961d3d49a683798bbd1a5990d25e52f56288735e4fa
- MD5 fff4614f9bdeb75f1101088505089195
- SHA1 118b85db2f131362ecc10e4f881c276a157a678d
- SHA512 b7afe9b6f2179ecb7cbc9e9b9d6413bb5cc518cbe6b50724cb567da9d54a9e6a3f55d71e9473336bb52fb2e9c5be4b1c828e705ae6a5f3e629ae60b14aa7b9f5
- SSDEEP 393216:t1hQh7rAGuOWCEDmlh2pSZkb4gCdjtkgJ++B:rkFupCEDUQpSZk9CzJvB
- TLSH T1EFE63307E041457AFC62533D9022C6058EBB3DFED329C14F0EA5769A5AB7EA30A3D6D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-09_fff4614f9bdeb75f1101088505089195_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_fff4614f9bdeb75f1101088505089195_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_fff4614f9bdeb75f1101088505089195_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 14.4MB
- SHA256 bbd6fc84b1deeb1ff6217961d3d49a683798bbd1a5990d25e52f56288735e4fa
- MD5 fff4614f9bdeb75f1101088505089195
- SHA1 118b85db2f131362ecc10e4f881c276a157a678d
- SHA512 b7afe9b6f2179ecb7cbc9e9b9d6413bb5cc518cbe6b50724cb567da9d54a9e6a3f55d71e9473336bb52fb2e9c5be4b1c828e705ae6a5f3e629ae60b14aa7b9f5
- SSDEEP 393216:t1hQh7rAGuOWCEDmlh2pSZkb4gCdjtkgJ++B:rkFupCEDUQpSZk9CzJvB
- TLSH T1EFE63307E041457AFC62533D9022C6058EBB3DFED329C14F0EA5769A5AB7EA30A3D6D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.