General
- Target 2026-08-16_adcae238a5eb333baee85a7a4c35692f_cobalt-strike_glassworm_icedid_njrat
- Size 16.4MB
- Sample260816-egynnsygpg
- SHA256 046707f7e77267076da5b9e0079a315309245025f81a4faef5b123acc29822e7
- MD5 adcae238a5eb333baee85a7a4c35692f
- SHA1 29fbb5cd258486a844f37a6821e4e2e54363e15b
- SHA512 af6e8c8b7dd3e488d63fe3c88be6cffcdfeaa2d8e4033f52376a50edb3ca680766f6d730289baf1d65e47851eec9924bd7e61db3a629c64eb9aa0de13416c28f
- SSDEEP 393216:ldTfwgggjgzggsgTguwttbgNlggigggXsgJgUQLCgggggCNc/gggga4ggggcgggN:TRggjgzggsgTgugtbgNlggigggXsgJgB
- TLSH T1DB075B3A21AC01DCF1BBD0BD8BDB9E47D6B2340903319ADF0591569A1E1BDED4A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_adcae238a5eb333baee85a7a4c35692f_cobalt-strike_glassworm_icedid_njrat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_adcae238a5eb333baee85a7a4c35692f_cobalt-strike_glassworm_icedid_njrat.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_adcae238a5eb333baee85a7a4c35692f_cobalt-strike_glassworm_icedid_njrat
- Size 16.4MB
- SHA256 046707f7e77267076da5b9e0079a315309245025f81a4faef5b123acc29822e7
- MD5 adcae238a5eb333baee85a7a4c35692f
- SHA1 29fbb5cd258486a844f37a6821e4e2e54363e15b
- SHA512 af6e8c8b7dd3e488d63fe3c88be6cffcdfeaa2d8e4033f52376a50edb3ca680766f6d730289baf1d65e47851eec9924bd7e61db3a629c64eb9aa0de13416c28f
- SSDEEP 393216:ldTfwgggjgzggsgTguwttbgNlggigggXsgJgUQLCgggggCNc/gggga4ggggcgggN:TRggjgzggsgTgugtbgNlggigggXsgJgB
- TLSH T1DB075B3A21AC01DCF1BBD0BD8BDB9E47D6B2340903319ADF0591569A1E1BDED4A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext