2026-08-09_045427481d7cac2136b0522961d29328_cobalt-strike_glassworm_icedid_luca-stealer_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_045427481d7cac2136b0522961d29328_cobalt-strike_glassworm_icedid_luca-stealer_njrat
Size 266KB
Sample260809-sdlrlazgpd
SHA256 38c8a7b1f71c176148ace08940c9bbe20856175526e9331d8526362e79982e2b
MD5 045427481d7cac2136b0522961d29328
SHA1 a9361192873fbee5b227a73bc87a75abdf0befa1
SHA512 504dd361e95fc09712a0a6cc25a3f43bf2555be9828f8659437240589558efd3ce4ccd837949751ebf8d5ad0e99d6b143638a429654962ad240d1c06be197097
SSDEEP 3072:zibLy/bh+nOl1bpHrR5cBlRY34sz/wI6vnpPZ7Trjp4P6w6WdBnrLHnrbE3H:Xl1bpd54XYJHUptPN47nrjnrCH
TLSH
T1E6446B96BBA009F4ECB3D239C9515222FAB278590374EBDB57A006671F337A09D3E750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_045427481d7cac2136b0522961d29328_cobalt-strike_glassworm_icedid_luca-stealer_njrat

File Explorer

2026-08-09_045427481d7cac2136b0522961d29328_cobalt-strike_glassworm_icedid_luca-stealer_njrat

.exe 266KB

2026-08-09_045427481d7cac2136b0522961d29328_cobalt-strike_glassworm_icedid_luca-stealer_njrat

IMPHASH fb2a1bcaca0b7f5a1039296d82b30d95
SHA256 38c8a7b1f71c176148ace08940c9bbe20856175526e9331d8526362e79982e2b
MD5 045427481d7cac2136b0522961d29328
SHA1 a9361192873fbee5b227a73bc87a75abdf0befa1
SHA512 504dd361e95fc09712a0a6cc25a3f43bf2555be9828f8659437240589558efd3ce4ccd837949751ebf8d5ad0e99d6b143638a429654962ad240d1c06be197097
SSDEEP 3072:zibLy/bh+nOl1bpHrR5cBlRY34sz/wI6vnpPZ7Trjp4P6w6WdBnrLHnrbE3H:Xl1bpd54XYJHUptPN47nrjnrCH
TLSH
T1E6446B96BBA009F4ECB3D239C9515222FAB278590374EBDB57A006671F337A09D3E750
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

57904

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

CryptReleaseContext CryptGenRandom CryptAcquireContextA

kernel32

GetStdHandle CloseHandle MapViewOfFile UnmapViewOfFile CreateFileMappingA GetConsoleMode SetConsoleMode SetConsoleOutputCP RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW WriteConsoleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader ExitProcess GetModuleHandleExW CreateFileW GetDriveTypeW GetFileInformationByHandle GetFileType PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime SetStdHandle WriteFile GetModuleFileNameW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW GetConsoleOutputCP GetFileSizeEx SetFilePointerEx GetCurrentDirectoryW GetFullPathNameW MultiByteToWideChar FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetStringTypeW GetProcessHeap SetEndOfFile ReadFile ReadConsoleW FlushFileBuffers GetTimeZoneInformation HeapSize HeapReAlloc RtlUnwind

Name

.text

Size

163KB

Virtual Size

162KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.hash_ch

Size

1024B

Virtual Size

821B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.cipher

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

47KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

42KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_045427481d7cac2136b0522961d29328_cobalt-strike_glassworm_icedid_luca-stealer_njrat

advapi32

kernel32

generic