General
- Target 2026-08-13_efdbf64a6ce3abd50867541c0fc8396b_cobalt-strike_glassworm_icedid_njrat_stealc
- Size 22.5MB
- Sample260813-ddln9syvct
- SHA256 976052fbb77be5526695abc740a038f3a2b74514d307ef88b1035b98d1d84703
- MD5 efdbf64a6ce3abd50867541c0fc8396b
- SHA1 e80757a8eae92ad60aa22994f79c0af8ac80731e
- SHA512 54de4daffb885129820687b07e0e15a34043a481d8c8c8a70ceb94732877c27c095cd605e845d154217dd55b73f48b410ba1a04adfab9a24ea8aba9dd6b2c744
- SSDEEP 196608:Ul7BSfOCl/SBCNaXquAnGJJfRy+gJpwXfCn/cX6WHQjr3mjVy:UlFO/SmPCJfVgJSXYck
- TLSH T15A37C061A2B9525ECDCFB6F85413A102E32C94814F4399C7678A29ED1C79FD8DB3CE21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
5 signatures
Behavioral task
behavioral1
Sample
2026-08-13_efdbf64a6ce3abd50867541c0fc8396b_cobalt-strike_glassworm_icedid_njrat_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_efdbf64a6ce3abd50867541c0fc8396b_cobalt-strike_glassworm_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_efdbf64a6ce3abd50867541c0fc8396b_cobalt-strike_glassworm_icedid_njrat_stealc
- Size 22.5MB
- SHA256 976052fbb77be5526695abc740a038f3a2b74514d307ef88b1035b98d1d84703
- MD5 efdbf64a6ce3abd50867541c0fc8396b
- SHA1 e80757a8eae92ad60aa22994f79c0af8ac80731e
- SHA512 54de4daffb885129820687b07e0e15a34043a481d8c8c8a70ceb94732877c27c095cd605e845d154217dd55b73f48b410ba1a04adfab9a24ea8aba9dd6b2c744
- SSDEEP 196608:Ul7BSfOCl/SBCNaXquAnGJJfRy+gJpwXfCn/cX6WHQjr3mjVy:UlFO/SmPCJfVgJSXYck
- TLSH T15A37C061A2B9525ECDCFB6F85413A102E32C94814F4399C7678A29ED1C79FD8DB3CE21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing possible sandbox analysis VM usernames
-
Detects executables packed with Themida
-
Detects executables packed with VMProtect.
-
Detects executables referencing many IR and analysis tools