General
- Target 2026-08-22_e3c67c0a389e88337c6fbba364d6dfc6_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 29.5MB
- Sample260822-2e4s8szfle
- SHA256 317894326b20cae3d51551be081e4b1dc62d90b19c5da2b0fc2c2eacd545b5cc
- MD5 e3c67c0a389e88337c6fbba364d6dfc6
- SHA1 c5886095686003ffa9a24ca8a4f2e05ae72e2590
- SHA512 d26fe0eec9b23753167b820bc23d74f81ab98988eaf2e4e8afe3f1457bc09179c5cecfc0e4d1a398dcbde35e442bf37967d0842828aef627374a5290fd422737
- SSDEEP 786432:x9YidhvMksVl8ZrspW84XK1QtIea8DZcUTKl84nbmY1015yeyLJIM:x9JbHgpWFGiIv61rqbx0b
- TLSH T1E0673348A6D208C9E5DE323985A6C622A7E2FD9547D0C24F1BFE19300F972E5EF35E11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-22_e3c67c0a389e88337c6fbba364d6dfc6_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_e3c67c0a389e88337c6fbba364d6dfc6_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_e3c67c0a389e88337c6fbba364d6dfc6_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 29.5MB
- SHA256 317894326b20cae3d51551be081e4b1dc62d90b19c5da2b0fc2c2eacd545b5cc
- MD5 e3c67c0a389e88337c6fbba364d6dfc6
- SHA1 c5886095686003ffa9a24ca8a4f2e05ae72e2590
- SHA512 d26fe0eec9b23753167b820bc23d74f81ab98988eaf2e4e8afe3f1457bc09179c5cecfc0e4d1a398dcbde35e442bf37967d0842828aef627374a5290fd422737
- SSDEEP 786432:x9YidhvMksVl8ZrspW84XK1QtIea8DZcUTKl84nbmY1015yeyLJIM:x9JbHgpWFGiIv61rqbx0b
- TLSH T1E0673348A6D208C9E5DE323985A6C622A7E2FD9547D0C24F1BFE19300F972E5EF35E11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.