General
- Target 2026-08-22_c948f4f0b69963ca180d3b36b4c10bcd_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 16.1MB
- Sample260823-ast3eadk2s
- SHA256 18842c7b36fd4e26f1eb160b414426fedc2aa99c9786a764f28d808232fca0e8
- MD5 c948f4f0b69963ca180d3b36b4c10bcd
- SHA1 2275bf60d4432c9b0228cba53fa25db9e49f0862
- SHA512 2b31a5e6dceae27555780f6dcba9666cfc93c293046d6390d3bec2a11d8200e48720bf592a61bd4043493f4e71013eb5a9bdcc1515fc50be67d20446d3c6dfdc
- SSDEEP 393216:rcM0Y6zdZ11a8W1+TtIiFY0V8/3c1tEF6gjv2CqLImjIlS:j6Pa8W1QtIk0c1t6bvoLIUIlS
- TLSH T147073354A3620CDBE1EF143A85B2CF34FAF7B84A4761C2CF57EC16851A532C54E3AA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_c948f4f0b69963ca180d3b36b4c10bcd_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_c948f4f0b69963ca180d3b36b4c10bcd_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_c948f4f0b69963ca180d3b36b4c10bcd_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 16.1MB
- SHA256 18842c7b36fd4e26f1eb160b414426fedc2aa99c9786a764f28d808232fca0e8
- MD5 c948f4f0b69963ca180d3b36b4c10bcd
- SHA1 2275bf60d4432c9b0228cba53fa25db9e49f0862
- SHA512 2b31a5e6dceae27555780f6dcba9666cfc93c293046d6390d3bec2a11d8200e48720bf592a61bd4043493f4e71013eb5a9bdcc1515fc50be67d20446d3c6dfdc
- SSDEEP 393216:rcM0Y6zdZ11a8W1+TtIiFY0V8/3c1tEF6gjv2CqLImjIlS:j6Pa8W1QtIk0c1t6bvoLIUIlS
- TLSH T147073354A3620CDBE1EF143A85B2CF34FAF7B84A4761C2CF57EC16851A532C54E3AA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.