General
- Target 2026-08-23_e64cdf45e55c015e7d227c428041f5bc_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 11.0MB
- Sample260823-vsr82aydpf
- SHA256 59407cf82b1c5195a14ff5b3a18d56a4771d60856cdcd43d64b2a1f4e541607f
- MD5 e64cdf45e55c015e7d227c428041f5bc
- SHA1 439e95fa9f3e526c0c665ff246b01a693bde6351
- SHA512 507f4dba300a7d4a57891f4e6b1d6ca9b652fa1c46346f789a51bdbe3a7268907e7fddc99ad7696efc1dd9e14ee7fab0c1d0e3270e2e1a940f125d9c5cc2e091
- SSDEEP 196608:TVtgesW+buXVw1/wbITLwOjUqiICteEroXxo3zlxZV3Gu5D4S26/CS33LnGNLowH:Yo+d1obI/wInEroXW14S267GJ/zU2
- TLSH T152C63304AAF418FEE9BB44798035C439D5F26C920B60C46F17FC86575FA73E0AE7AA44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_e64cdf45e55c015e7d227c428041f5bc_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_e64cdf45e55c015e7d227c428041f5bc_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_e64cdf45e55c015e7d227c428041f5bc_cobalt-strike_glassworm_icedid_njrat_satacom_vidar
- Size 11.0MB
- SHA256 59407cf82b1c5195a14ff5b3a18d56a4771d60856cdcd43d64b2a1f4e541607f
- MD5 e64cdf45e55c015e7d227c428041f5bc
- SHA1 439e95fa9f3e526c0c665ff246b01a693bde6351
- SHA512 507f4dba300a7d4a57891f4e6b1d6ca9b652fa1c46346f789a51bdbe3a7268907e7fddc99ad7696efc1dd9e14ee7fab0c1d0e3270e2e1a940f125d9c5cc2e091
- SSDEEP 196608:TVtgesW+buXVw1/wbITLwOjUqiICteEroXxo3zlxZV3Gu5D4S26/CS33LnGNLowH:Yo+d1obI/wInEroXW14S267GJ/zU2
- TLSH T152C63304AAF418FEE9BB44798035C439D5F26C920B60C46F17FC86575FA73E0AE7AA44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Loads dropped DLL
-
Suspicious use of SetThreadContext