General
- Target 2026-08-10_9902f9dae38dcf9666af383b4225edaf_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 2.3MB
- Sample260810-cnvjgsde83
- SHA256 adeabbd1188c5505a35624b6fba085e702bcfda031a45bcd99394d4779a4389a
- MD5 9902f9dae38dcf9666af383b4225edaf
- SHA1 1f4d61dbf99bdea6fc9d8753b34808dd2a884e5f
- SHA512 174d75807e6a95c99048e96434ef13447ba3654a833312e7973cf729aad34eb3b6265886d33ac33a8679bd2fd2c0942fcfc64de60cfd4c24fe41589a15ff35f1
- SSDEEP 49152:F/DwXFNERDQI2NeXdtnI2zUy+gnGfmmoL2mfAeluYVP:F/VOleXddHgmmoL2mfAeluY
- TLSH T18BB5AF0766E900E8C37EC5B8C52A9183D772B41983A4D6EF17D895950F236DB1BFBB02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_9902f9dae38dcf9666af383b4225edaf_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_9902f9dae38dcf9666af383b4225edaf_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_9902f9dae38dcf9666af383b4225edaf_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 2.3MB
- SHA256 adeabbd1188c5505a35624b6fba085e702bcfda031a45bcd99394d4779a4389a
- MD5 9902f9dae38dcf9666af383b4225edaf
- SHA1 1f4d61dbf99bdea6fc9d8753b34808dd2a884e5f
- SHA512 174d75807e6a95c99048e96434ef13447ba3654a833312e7973cf729aad34eb3b6265886d33ac33a8679bd2fd2c0942fcfc64de60cfd4c24fe41589a15ff35f1
- SSDEEP 49152:F/DwXFNERDQI2NeXdtnI2zUy+gnGfmmoL2mfAeluYVP:F/VOleXddHgmmoL2mfAeluY
- TLSH T18BB5AF0766E900E8C37EC5B8C52A9183D772B41983A4D6EF17D895950F236DB1BFBB02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks whether UAC is enabled