General
- Target 2026-08-25_87ed1858aecc9ded6bfd5e5dae90d437_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_remcos_satacom_stealc_up007
- Size 47.0MB
- Sample260826-w9gpasvcja
- SHA256 cfdee45769fa953f919082951c5c75c0314fe695b879261d81c3e5c844d84680
- MD5 87ed1858aecc9ded6bfd5e5dae90d437
- SHA1 03892ef9626a59fffb6ea261118af4e71ba6e22c
- SHA512 c57d578e4bbc6498e513a1780c7208b0a869d3748c2c2609e34d663e044cac4f1563a1c0d6f6eddb8dcfcf4ced23191433ebc72645b17a2257825711366c84f9
- SSDEEP 786432:vrav1fIaw35c9uIvykLMk7hh1fIan35AcuyvTZ:vrS9tvhok7R+cPv
- TLSH T173B7BFF261041EE1ED13A77680664817BA313B2C39DA119EF8F690DC3BD9A52275B733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-25_87ed1858aecc9ded6bfd5e5dae90d437_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_r.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_87ed1858aecc9ded6bfd5e5dae90d437_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_r.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_87ed1858aecc9ded6bfd5e5dae90d437_cobalt-strike_elex_glassworm_icedid_luca-stealer_njrat_remcos_satacom_stealc_up007
- Size 47.0MB
- SHA256 cfdee45769fa953f919082951c5c75c0314fe695b879261d81c3e5c844d84680
- MD5 87ed1858aecc9ded6bfd5e5dae90d437
- SHA1 03892ef9626a59fffb6ea261118af4e71ba6e22c
- SHA512 c57d578e4bbc6498e513a1780c7208b0a869d3748c2c2609e34d663e044cac4f1563a1c0d6f6eddb8dcfcf4ced23191433ebc72645b17a2257825711366c84f9
- SSDEEP 786432:vrav1fIaw35c9uIvykLMk7hh1fIan35AcuyvTZ:vrS9tvhok7R+cPv
- TLSH T173B7BFF261041EE1ED13A77680664817BA313B2C39DA119EF8F690DC3BD9A52275B733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Detects executables using Telegram Chat Bot