General
- Target 2026-08-22_8b291df140d9f2cda8652a354a00e254_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 12.3MB
- Sample260823-fxp7xashpd
- SHA256 97409e24a9fd8921037ca6a19c466753ea9c7f63381d51ab1e927b7583d0c1fc
- MD5 8b291df140d9f2cda8652a354a00e254
- SHA1 19f2e8de3b61f48835e2a0f037a1f3fd99b4c825
- SHA512 3fb914dc5b438b523538c95c8a910f8b6281b63f86762d705d5f867d639391e2646aa312218bcdedee4bbb6f8826b287a9bc2666203f7e3635888d70f7bcb220
- SSDEEP 393216:CwW8+eXMCHWUj9rRQ7XbFsn6GEaILwzr5gR/45:CwW8HXMb89rRQ766GWur5gR/e
- TLSH T10AD6338837A509A8FD6AA13D9CE05D1BC296786907F8C683E7F946720D731D8EE74331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-22_8b291df140d9f2cda8652a354a00e254_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_8b291df140d9f2cda8652a354a00e254_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_8b291df140d9f2cda8652a354a00e254_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 12.3MB
- SHA256 97409e24a9fd8921037ca6a19c466753ea9c7f63381d51ab1e927b7583d0c1fc
- MD5 8b291df140d9f2cda8652a354a00e254
- SHA1 19f2e8de3b61f48835e2a0f037a1f3fd99b4c825
- SHA512 3fb914dc5b438b523538c95c8a910f8b6281b63f86762d705d5f867d639391e2646aa312218bcdedee4bbb6f8826b287a9bc2666203f7e3635888d70f7bcb220
- SSDEEP 393216:CwW8+eXMCHWUj9rRQ7XbFsn6GEaILwzr5gR/45:CwW8HXMb89rRQ766GWur5gR/e
- TLSH T10AD6338837A509A8FD6AA13D9CE05D1BC296786907F8C683E7F946720D731D8EE74331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.