General

  • Target
    2026-08-24_f3752411e5cac9d80ff969b89cbccdad_akira_amadey_cobalt-strike_glassworm_hijackloader_icedid_luca-stealer_njrat_satacom_stealc_vidar
  • Size 17.1MB
  • Sample260824-yvvzgsshmd
  • SHA256 0b9e37ce7a484fded6b00cf807ce5ab75950da3485b52bc4101d40c2ce3c2652
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Targets

    • Target
      2026-08-24_f3752411e5cac9d80ff969b89cbccdad_akira_amadey_cobalt-strike_glassworm_hijackloader_icedid_luca-stealer_njrat_satacom_stealc_vidar
    • Size 17.1MB
    • SHA256 0b9e37ce7a484fded6b00cf807ce5ab75950da3485b52bc4101d40c2ce3c2652
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Loads dropped DLL

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks