cc0a87a372e50b445e6c6b924eb53e01b04bf6d6bed1e26333dce5687e73ee78

Resubmissions

17/08/2026, 15:25

260817-st48wacb735

17/08/2026, 12:20

260817-ph6qsabc427

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-17_fecaf4ae887c28cde24a27a389802aa0_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
Size 71.5MB
Sample260817-st48wacb73
SHA256 cc0a87a372e50b445e6c6b924eb53e01b04bf6d6bed1e26333dce5687e73ee78
MD5 fecaf4ae887c28cde24a27a389802aa0
SHA1 f2c0ab20fcf102eb9e2d49dd14341f0a62424e9d
SHA512 a3755d055d7e0300b14f29fdd937f8e72a39dc33dd024419f6472ab1b5c6e46e3f7441bac0e7c267b712f994036b9be5d8b1d92aee0492c9fca31f58a401faa6
SSDEEP 1572864:TlusKWIPEhqKVZVd1AEJ5Rh1+BDDy4gds8KN2BBc33yxp/R+yGYcxCTY/:Tl5K8jVd1AY5bADDxgds8m33QtGYcxCT
TLSH
T1F0F73349FB607C45F2699736C657CE0AE9A4D11D02AFC94306F104B91CB71CAEEF8E62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  Rat.pyc
- Size 119KB
- SHA256 9cd921edd5915ef3cf8e40b5a73ec2b85c7caa3225126b243c2f61bf3cb5f291
- MD5 5825127cd904932c92175d4bfd758868
- SHA1 af5db0ef92d6b6747c31747691bda55916fd7118
- SHA512 fee8145228b765d24df5e6abda0da04a66ed5ac8bbe1d0baa550fae7fffa0ef931d6f11399c08a20afe9b957faf84eef60751089e3b41dcccee4282f481f82a5
- SSDEEP 1536:RnuoOLyBSxvktH2mT4xFywb08axyaFL39lPUxgJpe3WwdJ3Jd3WjMGdsg0OW6qgQ:RnJOHvI0Fyww8axl9KDWJ4
- TLSH
  T127C3F596A4A18922FF10F075C4ED8984E33D7E857755C323350E8274BEE6A7ED99A30C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2