General
- Target 2026-08-24_ffa269ecf02a45ce8cf5758162275535_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_remcos_satacom_stealc_up007
- Size 47.0MB
- Sample260824-xdg6mascpb
- SHA256 27d62674a394ee4f885c9c77d5352eabbae5e2c101c72e5facc1e2765933a6c3
- MD5 ffa269ecf02a45ce8cf5758162275535
- SHA1 201a10efa7bd5a7e3f0f80e64069bf6cb3c3e864
- SHA512 94c66fcf5b8d85eade26f10a8fe519176eaad8253f086803f906a9fc9da688e8829e2df78ed16b8eb588008804890998abd6ea67bbb9999e89be7ecf4d15354a
- SSDEEP 786432:yrav1fIaw35c9uIvykLMk7hh1fIan35AcuyvTZ:yrS9tvhok7R+cPv
- TLSH T15EB7BFF261041EE1ED13A77680664817BA313B2C39DA119EF8F690DC3BD9A52275B733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-24_ffa269ecf02a45ce8cf5758162275535_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_r.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_ffa269ecf02a45ce8cf5758162275535_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_r.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_ffa269ecf02a45ce8cf5758162275535_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_remcos_satacom_stealc_up007
- Size 47.0MB
- SHA256 27d62674a394ee4f885c9c77d5352eabbae5e2c101c72e5facc1e2765933a6c3
- MD5 ffa269ecf02a45ce8cf5758162275535
- SHA1 201a10efa7bd5a7e3f0f80e64069bf6cb3c3e864
- SHA512 94c66fcf5b8d85eade26f10a8fe519176eaad8253f086803f906a9fc9da688e8829e2df78ed16b8eb588008804890998abd6ea67bbb9999e89be7ecf4d15354a
- SSDEEP 786432:yrav1fIaw35c9uIvykLMk7hh1fIan35AcuyvTZ:yrS9tvhok7R+cPv
- TLSH T15EB7BFF261041EE1ED13A77680664817BA313B2C39DA119EF8F690DC3BD9A52275B733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Detects executables using Telegram Chat Bot