2026-08-16_46c93d8ab871a7e26a6263572aec76b7_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-16_46c93d8ab871a7e26a6263572aec76b7_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc
Size 542KB
Sample260816-fbjs1azdpg
SHA256 2bff78f6a252cb220696dce67daee37515706d537a9d83768538ffede242d245
MD5 46c93d8ab871a7e26a6263572aec76b7
SHA1 41244f90ced609a02611a67d5ba08b056ac58a14
SHA512 068a29fa1f0feba267494aeeb7fd5a505305a23f535ab2d7ce23c7472b7e8213327e45c4e1a8ad9f1bdd7fb3b04cf0a318031717ffa000514c2e4136a572acc3
SSDEEP 6144:GPCshF3sWnpoZBxrOhFsc3SZops/z8W/+wks3/qGu0gI1V9Df7N44HVPkUp/1yDz:GPCRvOH5SZoi/ocnSmvf7rHth/gi
TLSH
T19AC45C65A6A803F8E1E6C578CD624906E7727C998771DADF03D049A60F376D08E3EB31
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-16_46c93d8ab871a7e26a6263572aec76b7_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-16_46c93d8ab871a7e26a6263572aec76b7_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc

.exe 542KB

2026-08-16_46c93d8ab871a7e26a6263572aec76b7_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH 3c68c81b8afaeb6bba99e70cf068429f
SHA256 2bff78f6a252cb220696dce67daee37515706d537a9d83768538ffede242d245
MD5 46c93d8ab871a7e26a6263572aec76b7
SHA1 41244f90ced609a02611a67d5ba08b056ac58a14
SHA512 068a29fa1f0feba267494aeeb7fd5a505305a23f535ab2d7ce23c7472b7e8213327e45c4e1a8ad9f1bdd7fb3b04cf0a318031717ffa000514c2e4136a572acc3
SSDEEP 6144:GPCshF3sWnpoZBxrOhFsc3SZops/z8W/+wks3/qGu0gI1V9Df7N44HVPkUp/1yDz:GPCRvOH5SZoi/ocnSmvf7rHth/gi
TLSH
T19AC45C65A6A803F8E1E6C578CD624906E7727C998771DADF03D049A60F376D08E3EB31
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

197896

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\Sysshark (1)\SHARK ANTICHEAT - Copy (2)\Shark Anticheat\x64\Release\Shark Anticheat.pdb

kernel32

GetProcAddress GetCurrentProcessId GetModuleHandleW QueryFullProcessImageNameW GetExitCodeProcess GetWindowsDirectoryW FreeLibrary FindFirstVolumeW FindVolumeClose GetVolumePathNamesForVolumeNameW FindNextVolumeW WaitForSingleObject Sleep MultiByteToWideChar GetFileAttributesW FileTimeToSystemTime FindFirstFileW FindNextFileW FindClose SystemTimeToFileTime GetSystemTime SetPriorityClass IsDebuggerPresent SetEndOfFile WriteConsoleW HeapSize SetStdHandle GetProcessHeap SetEnvironmentVariableW OpenProcess DuplicateHandle SetFilePointerEx GetTickCount64 DeviceIoControl GetCurrentProcess GetFileSizeEx ReadFile GetLastError GetFileTime AllocConsole GetSystemTimeAsFileTime SetConsoleOutputCP GetConsoleWindow CloseHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage HeapReAlloc CreatePipe ReadConsoleW GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree RtlUnwind HeapAlloc GetFileType DeleteFileA GetConsoleMode CreateFileW GetVolumeInformationA SetConsoleWindowInfo GetModuleFileNameW SetConsoleMode GetStdHandle SetConsoleScreenBufferSize SetConsoleTitleA GetCommandLineW GetCommandLineA WriteFile GetModuleHandleExW WideCharToMultiByte GetStringTypeW GetCurrentThreadId LocalFree FindFirstFileExW GetFileAttributesExW QueryPerformanceCounter QueryPerformanceFrequency EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW CreateProcessW ExitProcess

user32

SetWindowPos GetWindowLongW SetWindowLongW GetSystemMetrics MessageBoxW

advapi32

FreeSid AllocateAndInitializeSid OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW OpenServiceW QueryServiceConfigW OpenSCManagerW CloseServiceHandle QueryServiceStatus RegCloseKey CheckTokenMembership RegOpenKeyExW RegQueryValueExW

wininet

HttpSendRequestA HttpQueryInfoA InternetConnectA HttpOpenRequestA InternetCloseHandle InternetOpenA

iphlpapi

GetExtendedTcpTable GetIpNetTable

ws2_32

inet_ntop inet_pton ntohl

Name

.text

Size

368KB

Virtual Size

368KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

141KB

Virtual Size

140KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-16_46c93d8ab871a7e26a6263572aec76b7_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc

kernel32

user32

advapi32

wininet

iphlpapi

ws2_32

generic