General
- Target 2026-08-21_5fba4b04a37a2f47bdd6667c878ed9a7_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 66.8MB
- Sample260821-b8ehbsha69
- SHA256 f892e02ab1f1639249e0bddc184e817e13640b54cb89dce89801079416205462
- MD5 5fba4b04a37a2f47bdd6667c878ed9a7
- SHA1 aea4adf60d6bcb008584c21fcc83cf3f1686cbdb
- SHA512 8635638854051035b911825eb2290916a856ad7e000a6f1bdbb176e794cdb8b1667a63253aaa3b794a05fdbedcd84bf3334cda55d2a040eb8b767578bd4c1a79
- SSDEEP 1572864:QLt5Z2mlRLX5WJoWbgWRSgkNOXWxtQSNWcz3yxp9j1qAKL6Q6T:QLt5LdX5M3gbcKCgz3gpqrLj2
- TLSH T1FFE733461A71FCE4F6AAC2374D819E08B915F98E521FCE0B17F862711E9B1C09D7EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-21_5fba4b04a37a2f47bdd6667c878ed9a7_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_5fba4b04a37a2f47bdd6667c878ed9a7_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_5fba4b04a37a2f47bdd6667c878ed9a7_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 66.8MB
- SHA256 f892e02ab1f1639249e0bddc184e817e13640b54cb89dce89801079416205462
- MD5 5fba4b04a37a2f47bdd6667c878ed9a7
- SHA1 aea4adf60d6bcb008584c21fcc83cf3f1686cbdb
- SHA512 8635638854051035b911825eb2290916a856ad7e000a6f1bdbb176e794cdb8b1667a63253aaa3b794a05fdbedcd84bf3334cda55d2a040eb8b767578bd4c1a79
- SSDEEP 1572864:QLt5Z2mlRLX5WJoWbgWRSgkNOXWxtQSNWcz3yxp9j1qAKL6Q6T:QLt5LdX5M3gbcKCgz3gpqrLj2
- TLSH T1FFE733461A71FCE4F6AAC2374D819E08B915F98E521FCE0B17F862711E9B1C09D7EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.