General
- Target 2026-08-20_ba470c0ed787ca4ce9e967c16e2c134a_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar
- Size 1.9MB
- Sample260821-c149fs1dne
- SHA256 89a5a0646a1bb559bbc52a1e42b438d705f3e800ef62a7e840ccf5f712623bdf
- MD5 ba470c0ed787ca4ce9e967c16e2c134a
- SHA1 a00a7542dab6d91ccf4e5c503bb7b8810159d732
- SHA512 a9758fc6a6502a7163cca0cb258c9dbb94e110cf9537beaa1d23b7b2f67e24fa1767ef163bfb835eb448f458b12662938c47f4c9c18c5ef26f6228b8502d7123
- SSDEEP 49152:DRZMX20DglRlpXMV5QaMzv02g7xCQ36YGImkQ0ziNzN:F50o+URYGI3iT
- TLSH T1D8956B2AF3F680A9D667C1F9C5350226EA3174D927249BDB3158852D9F63BD02F3E360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_ba470c0ed787ca4ce9e967c16e2c134a_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_ba470c0ed787ca4ce9e967c16e2c134a_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_ba470c0ed787ca4ce9e967c16e2c134a_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar
- Size 1.9MB
- SHA256 89a5a0646a1bb559bbc52a1e42b438d705f3e800ef62a7e840ccf5f712623bdf
- MD5 ba470c0ed787ca4ce9e967c16e2c134a
- SHA1 a00a7542dab6d91ccf4e5c503bb7b8810159d732
- SHA512 a9758fc6a6502a7163cca0cb258c9dbb94e110cf9537beaa1d23b7b2f67e24fa1767ef163bfb835eb448f458b12662938c47f4c9c18c5ef26f6228b8502d7123
- SSDEEP 49152:DRZMX20DglRlpXMV5QaMzv02g7xCQ36YGImkQ0ziNzN:F50o+URYGI3iT
- TLSH T1D8956B2AF3F680A9D667C1F9C5350226EA3174D927249BDB3158852D9F63BD02F3E360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger