2026-08-27_a74dd7d347730883c116c7f2cac79901_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar

General

Target
2026-08-27_a74dd7d347730883c116c7f2cac79901_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
Size 13.6MB
Sample260827-m6m78stdjh
SHA256 7fc9d2c4497bc3b2f0059dd11258728e69828de4618532095d16783d26788ad3
MD5 a74dd7d347730883c116c7f2cac79901
SHA1 cbe16e454ca401f3e894302caab1a114fe4874a6
SHA512 2529460a67663327e767aa34d2a299dd29382fdc70fb7f03c3109889dbc9e5c7cab743899173d817f02a2d534baf1bc145e6fd6cdfe221186589b4f99fadaa45
SSDEEP 393216:29YiZlXMCHWUj/cuI09/P0vCKfXms96YqZ5o:29YiZlXMb8UE9/saKOl5o
TLSH
T154E633E497F02DEBD6A11136FDA5D16CB6DABC2A0F71C21BD3B8A31519A74C00879E13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

pyinstaller

Malware Config

Signatures

Detects Pyinstaller 1 IoCs

pyinstaller

resource	yara_rule
sample	pyinstaller

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-27_a74dd7d347730883c116c7f2cac79901_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar

File Explorer

2026-08-27_a74dd7d347730883c116c7f2cac79901_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar

.exe 13.6MB
123.pyc

8KB

2026-08-27_a74dd7d347730883c116c7f2cac79901_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar

IMPHASH a06f302f71edd380da3d5bf4a6d94ebd
SHA256 7fc9d2c4497bc3b2f0059dd11258728e69828de4618532095d16783d26788ad3
MD5 a74dd7d347730883c116c7f2cac79901
SHA1 cbe16e454ca401f3e894302caab1a114fe4874a6
SHA512 2529460a67663327e767aa34d2a299dd29382fdc70fb7f03c3109889dbc9e5c7cab743899173d817f02a2d534baf1bc145e6fd6cdfe221186589b4f99fadaa45
SSDEEP 393216:29YiZlXMCHWUj/cuI09/P0vCKfXms96YqZ5o:29YiZlXMb8UE9/saKOl5o
TLSH
T154E633E497F02DEBD6A11136FDA5D16CB6DABC2A0F71C21BD3B8A31519A74C00879E13
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Detects Pyinstaller

pyinstaller
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

49952

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

TranslateMessage ShutdownBlockReasonCreate GetWindowThreadProcessId SetWindowLongPtrW GetWindowLongPtrW MsgWaitForMultipleObjects ShowWindow DestroyWindow CreateWindowExW RegisterClassW DefWindowProcW PeekMessageW DispatchMessageW GetMessageW

kernel32

GetTimeZoneInformation GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage GetStringTypeW FormatMessageW GetLastError GetModuleFileNameW LoadLibraryExW SetDllDirectoryW CreateSymbolicLinkW GetProcAddress CreateDirectoryW GetCommandLineW GetEnvironmentVariableW ExpandEnvironmentStringsW DeleteFileW FindClose FindFirstFileW FindNextFileW HeapSize RemoveDirectoryW GetTempPathW CloseHandle QueryPerformanceCounter QueryPerformanceFrequency WaitForSingleObject Sleep GetCurrentProcess GetCurrentProcessId TerminateProcess GetExitCodeProcess CreateProcessW GetStartupInfoW FreeLibrary LocalFree SetConsoleCtrlHandler GetConsoleWindow K32EnumProcessModules K32GetModuleFileNameExW CreateFileW FindFirstFileExW GetFinalPathNameByHandleW MultiByteToWideChar WideCharToMultiByte GetFileAttributesExW HeapReAlloc WriteConsoleW SetEndOfFile GetDriveTypeW IsDebuggerPresent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetModuleHandleW RtlUnwindEx SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree EncodePointer RaiseException RtlPcToFileHeader GetFileInformationByHandle GetFileType PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime ReadFile GetFullPathNameW SetStdHandle GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCommandLineA HeapFree GetConsoleMode ReadConsoleW SetFilePointerEx GetConsoleOutputCP GetFileSizeEx HeapAlloc FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetCurrentDirectoryW FlushFileBuffers SetEnvironmentVariableW

advapi32

ConvertSidToStringSidW GetTokenInformation OpenProcessToken ConvertStringSecurityDescriptorToSecurityDescriptorW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-27_a74dd7d347730883c116c7f2cac79901_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar

user32

kernel32

advapi32

generic

123.pyc