General
- Target 2026-08-10_d15251cb8dec86b5f81d958b858a6578_cobalt-strike_glassworm_hijackloader_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 7.6MB
- Sample260810-jz8ntaeh53
- SHA256 4a202b96946a53e220a7b09237128904f6a4a2ca3a6fa15436ed68620c9c8730
- MD5 d15251cb8dec86b5f81d958b858a6578
- SHA1 0e4946049291690c690541f1a85bff7c0f6bc63e
- SHA512 4adf98cda8c8663fb7c9d376b10be3acb8d9d2101f5bd57fabf25bd073ff1005006167b9d55170d3502799840408d4e40609e6969f5d22a920b3627a7eacbaac
- SSDEEP 98304:120kLED4OxChTxGrbOK+iU8tn+deFnct5zZ36/3H:120kLgtgh1yb4W+BFAX
- TLSH T150867C13F6A640D9D05DC2B8DB579533FA31B8950B20B2CF2A9417212F7BBE06B7A714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_d15251cb8dec86b5f81d958b858a6578_cobalt-strike_glassworm_hijackloader_icedid_luca-stealer.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_d15251cb8dec86b5f81d958b858a6578_cobalt-strike_glassworm_hijackloader_icedid_luca-stealer.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_d15251cb8dec86b5f81d958b858a6578_cobalt-strike_glassworm_hijackloader_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 7.6MB
- SHA256 4a202b96946a53e220a7b09237128904f6a4a2ca3a6fa15436ed68620c9c8730
- MD5 d15251cb8dec86b5f81d958b858a6578
- SHA1 0e4946049291690c690541f1a85bff7c0f6bc63e
- SHA512 4adf98cda8c8663fb7c9d376b10be3acb8d9d2101f5bd57fabf25bd073ff1005006167b9d55170d3502799840408d4e40609e6969f5d22a920b3627a7eacbaac
- SSDEEP 98304:120kLED4OxChTxGrbOK+iU8tn+deFnct5zZ36/3H:120kLgtgh1yb4W+BFAX
- TLSH T150867C13F6A640D9D05DC2B8DB579533FA31B8950B20B2CF2A9417212F7BBE06B7A714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1