General
- Target 2026-08-16_bbd55fa258124bfdf72a9984022c9d9c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_qakbot_satacom_stealc_vidar
- Size 4.3MB
- Sample260816-vjftmseq4s
- SHA256 a2ff86b6d1c92c7a547471d4010d2023cf05542f0de302584239498e4550e8c1
- MD5 bbd55fa258124bfdf72a9984022c9d9c
- SHA1 1b92582ad987b1abc6062106f5d734153bfce0ff
- SHA512 c0d130346dd89db1df1ec2159192257dc0a03610308a7d8cebff01b0bef4c3c9b3830008d9d77a021ca325483b38d2a19fa77a3448df09f31e85532567f174c3
- SSDEEP 49152:/adHo8AszjSsayj8+jctNfMWsSzjl7PYC5RuW7CaePVnBTMcR8/s+kobXHz/q/xo:/4Gl0vSzjlDX7C3B3jggqHPS1cnJuQ
- TLSH T1BC26CF4AA3A501E8D467907ACA86A70FD2757C0433905BDB26D45BA52F33BE0DEFB710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_bbd55fa258124bfdf72a9984022c9d9c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_qakbot_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_bbd55fa258124bfdf72a9984022c9d9c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_qakbot_satacom_stealc_vidar
- Size 4.3MB
- SHA256 a2ff86b6d1c92c7a547471d4010d2023cf05542f0de302584239498e4550e8c1
- MD5 bbd55fa258124bfdf72a9984022c9d9c
- SHA1 1b92582ad987b1abc6062106f5d734153bfce0ff
- SHA512 c0d130346dd89db1df1ec2159192257dc0a03610308a7d8cebff01b0bef4c3c9b3830008d9d77a021ca325483b38d2a19fa77a3448df09f31e85532567f174c3
- SSDEEP 49152:/adHo8AszjSsayj8+jctNfMWsSzjl7PYC5RuW7CaePVnBTMcR8/s+kobXHz/q/xo:/4Gl0vSzjlDX7C3B3jggqHPS1cnJuQ
- TLSH T1BC26CF4AA3A501E8D467907ACA86A70FD2757C0433905BDB26D45BA52F33BE0DEFB710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1