General

  • Target
    2026-08-09_bb5f2ce39f8441da0c71a19486e6c6af_cobalt-strike_glassworm_hijackloader_icedid_njrat_satacom_stealc_vidar
  • Size 17.2MB
  • Sample260809-x88l3avaph
  • SHA256 de93d2efdaec37acf4fd4a11a53d86876583a7e8f042de395d5cc00be08eea0f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-08-09_bb5f2ce39f8441da0c71a19486e6c6af_cobalt-strike_glassworm_hijackloader_icedid_njrat_satacom_stealc_vidar
    .exe 17.2MB

2026-08-09_bb5f2ce39f8441da0c71a19486e6c6af_cobalt-strike_glassworm_hijackloader_icedid_njrat_satacom_stealc_vidar

  • IMPHASH 4805d0b0147645845f4154a70ea6d78c
  • SHA256 de93d2efdaec37acf4fd4a11a53d86876583a7e8f042de395d5cc00be08eea0f
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
81:52:59:3a:b9:4e:76:2a:ae:28:76:5f:98:fe:7e:8d:32:27:1f:04:e3:11:5b:df:12:05:38:25:37:d8:98:c8
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Autodesk\, Inc.,O=Autodesk\, Inc.,L=San Rafael,ST=California,C=US
Minor OS version
0
Major OS version
6
Entry point
7280816
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
E:\jenkins\workspace\_Bootstrap_release_PDFY25AUG_1.0\target\Windows\x64\symbols\Release\Setup.pdb