General
- Target 2026-08-10_72ec6f62d8619bac28de96204cf2d0f6_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.4MB
- Sample260810-kcbagayzcx
- SHA256 b41ab86a043a8693fd228c1704ff919fe56ab4727a91af8dca1c7c5b18d3c392
- MD5 72ec6f62d8619bac28de96204cf2d0f6
- SHA1 410ac49425d2d56527801c144fdef307d0b96cdd
- SHA512 4e60e1a21c10691ba3fc36b3aec3134659b1312b57d2cbb0ff107aa1bbdf8034e274a9097f17ea67dbee00dee1cdd18b3c0d66d185bf4478108e41c23d3307c1
- SSDEEP 24576:b1LEgeK1z/t30frVsGcdEp26KBpSQrrQVQPpAYuOqoEMGlOhNHEJIodrodV:N39V/Bi2dEp26KBpSQrPoOKMrhN4+
- TLSH T1BD657D1BA69510E9C07AC178CA665112FA71BC5507306ADF27E067262F37FE0AF3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-10_72ec6f62d8619bac28de96204cf2d0f6_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_72ec6f62d8619bac28de96204cf2d0f6_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_72ec6f62d8619bac28de96204cf2d0f6_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.4MB
- SHA256 b41ab86a043a8693fd228c1704ff919fe56ab4727a91af8dca1c7c5b18d3c392
- MD5 72ec6f62d8619bac28de96204cf2d0f6
- SHA1 410ac49425d2d56527801c144fdef307d0b96cdd
- SHA512 4e60e1a21c10691ba3fc36b3aec3134659b1312b57d2cbb0ff107aa1bbdf8034e274a9097f17ea67dbee00dee1cdd18b3c0d66d185bf4478108e41c23d3307c1
- SSDEEP 24576:b1LEgeK1z/t30frVsGcdEp26KBpSQrrQVQPpAYuOqoEMGlOhNHEJIodrodV:N39V/Bi2dEp26KBpSQrPoOKMrhN4+
- TLSH T1BD657D1BA69510E9C07AC178CA665112FA71BC5507306ADF27E067262F37FE0AF3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE