General
- Target 2026-08-09_e191815811a28df4ac10fae4b29bd0bc_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 2.3MB
- Sample260809-s98k8shm6s
- SHA256 4031bc01cb883ad0bb22c08d8ea6e1018c735cf3102e1d8779ad9139b04ecb2b
- MD5 e191815811a28df4ac10fae4b29bd0bc
- SHA1 de3891b0770b9a78e6c0e369a9e766d610e814a7
- SHA512 f86989e5b5fcb9c611ca00c4431d817207c8708590ff155d4d24411731d3e1288fce3c18f915e5eb82df11ddfe511f8b51c81bad7c492ac8282541d7176bbb73
- SSDEEP 49152:SLki7ylkDzeD6BeFWGpEpRZofT/2GVjWvcwAEP0:WeD60REofT/2GVjWv
- TLSH T17BB5A00766E900F8C37EC578C52A8543E772B429C3A4D6EF27E855950F236DB1BB6B02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_e191815811a28df4ac10fae4b29bd0bc_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_e191815811a28df4ac10fae4b29bd0bc_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_e191815811a28df4ac10fae4b29bd0bc_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 2.3MB
- SHA256 4031bc01cb883ad0bb22c08d8ea6e1018c735cf3102e1d8779ad9139b04ecb2b
- MD5 e191815811a28df4ac10fae4b29bd0bc
- SHA1 de3891b0770b9a78e6c0e369a9e766d610e814a7
- SHA512 f86989e5b5fcb9c611ca00c4431d817207c8708590ff155d4d24411731d3e1288fce3c18f915e5eb82df11ddfe511f8b51c81bad7c492ac8282541d7176bbb73
- SSDEEP 49152:SLki7ylkDzeD6BeFWGpEpRZofT/2GVjWvcwAEP0:WeD60REofT/2GVjWv
- TLSH T17BB5A00766E900F8C37EC578C52A8543E772B429C3A4D6EF27E855950F236DB1BB6B02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks whether UAC is enabled