General
- Target 2026-08-23_59bba8893e32a14f9ac9efa799384985_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 13.3MB
- Sample260824-nbpy1swhjb
- SHA256 bd4b00394fd40948ea3e9e090cb6de45f36fc8af2de026ac8c52a9de91203751
- MD5 59bba8893e32a14f9ac9efa799384985
- SHA1 1c7a2fae0a9785def910132cef2e2a5a904ea5de
- SHA512 4be6241c4e750db995201a648c1d43cd80b5799f0785423905b6dac6696bf23567fa1ab34c311cb5e9c3e9a91202721e6857388031c2f9dcc75c5502b92e5dab
- SSDEEP 393216:R9/afgPYVnNSM6dQuslul91iLeDpAUpc:R9ifgPQAdQuVceDqWc
- TLSH T172E6337952A428E5FBE9D53E4C3B8424AD72FC114FA0E18F079987952FA76B47C72B00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-23_59bba8893e32a14f9ac9efa799384985_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_59bba8893e32a14f9ac9efa799384985_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 13.3MB
- SHA256 bd4b00394fd40948ea3e9e090cb6de45f36fc8af2de026ac8c52a9de91203751
- MD5 59bba8893e32a14f9ac9efa799384985
- SHA1 1c7a2fae0a9785def910132cef2e2a5a904ea5de
- SHA512 4be6241c4e750db995201a648c1d43cd80b5799f0785423905b6dac6696bf23567fa1ab34c311cb5e9c3e9a91202721e6857388031c2f9dcc75c5502b92e5dab
- SSDEEP 393216:R9/afgPYVnNSM6dQuslul91iLeDpAUpc:R9ifgPQAdQuVceDqWc
- TLSH T172E6337952A428E5FBE9D53E4C3B8424AD72FC114FA0E18F079987952FA76B47C72B00
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.