2026-08-31_ee4d358983cb30037ff27a89fce179df_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-31_ee4d358983cb30037ff27a89fce179df_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 2.1MB
Sample260831-qa36csap2v
SHA256 41b41083207af0548e89d287d280c08bccc53ea437bffa7f43794ccfe623de0d
MD5 ee4d358983cb30037ff27a89fce179df
SHA1 4806388ad45425def2c4c5d7127e931a4de3378a
SHA512 4c808464af7ace703163f359cc562b6b76ba54437b552770307d00a57a23705031e088f02bab6836ada63098a08da9ff44d0f47db7d0cf772451497d1644ab29
SSDEEP 24576:EKmepYQyFryzH7ZuIkV4KDoKOf2ymhVDHyusr3EJ6cq0juTL9JEMTcF2nyuAz1:FHpYQyQzQ5DoKO+ymhVQr9aqHTS2yus
TLSH
T1EEA59E4676B801F4E1B7C17DC6678A17E7B1B4060720E7DB02E0969A2F23ED54EBE325
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-31_ee4d358983cb30037ff27a89fce179df_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-08-31_ee4d358983cb30037ff27a89fce179df_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 2.1MB

2026-08-31_ee4d358983cb30037ff27a89fce179df_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH b37873ec08d36a6389036ff40f449694
SHA256 41b41083207af0548e89d287d280c08bccc53ea437bffa7f43794ccfe623de0d
MD5 ee4d358983cb30037ff27a89fce179df
SHA1 4806388ad45425def2c4c5d7127e931a4de3378a
SHA512 4c808464af7ace703163f359cc562b6b76ba54437b552770307d00a57a23705031e088f02bab6836ada63098a08da9ff44d0f47db7d0cf772451497d1644ab29
SSDEEP 24576:EKmepYQyFryzH7ZuIkV4KDoKOf2ymhVDHyusr3EJ6cq0juTL9JEMTcF2nyuAz1:FHpYQyQzQ5DoKO+ymhVQr9aqHTS2yus
TLSH
T1EEA59E4676B801F4E1B7C17DC6678A17E7B1B4060720E7DB02E0969A2F23ED54EBE325
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1045856

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\WXKeyboard\WeChatPinYin\wxkb\01_mozc\third_party\crashrpt2\cmake-build-x64-release\bin\CrashSender1500.pdb

ws2_32

inet_ntoa inet_addr recv htonl closesocket connect htons ntohs send WSAGetLastError WSASetLastError WSACleanup WSAStartup getservbyname getservbyport gethostbyname gethostbyaddr socket

dnsapi

DnsFree DnsQuery_W

wininet

InternetWriteFile HttpSendRequestExW InternetReadFile InternetSetOptionW InternetCloseHandle HttpOpenRequestW InternetQueryOptionW InternetConnectW HttpEndRequestW HttpQueryInfoW InternetOpenW

rpcrt4

UuidToStringA RpcStringFreeA

gdi32

TextOutW SetLayout GetDIBits CreateDCW SetViewportOrgEx CreateHalftonePalette GetDIBColorTable CreateDIBSection SetStretchBltMode StretchBlt CreateCompatibleBitmap CreateCompatibleDC CreateFontIndirectW CreatePen DeleteDC DeleteObject GetStockObject SelectObject SetBkMode SetTextColor GetObjectW Polygon CreateSolidBrush SetBkColor SetDCBrushColor BitBlt CreateFontW CreatePalette CreateRectRgn RealizePalette SelectClipRgn SelectPalette SetDIBits

shell32

SHGetFileInfoW CommandLineToArgvW ShellExecuteW Shell_NotifyIconW SHGetSpecialFolderPathW SHFileOperationW ExtractIconW

comdlg32

GetSaveFileNameW GetOpenFileNameW

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

psapi

GetProcessMemoryInfo

kernel32

InterlockedFlushSList RtlUnwind FlsGetValue IsValidLocale FlsSetValue FlsFree GetDateFormatW GetTimeFormatW LCMapStringW RtlUnwindEx RtlPcToFileHeader GetSystemTimeAsFileTime QueryPerformanceCounter GetStartupInfoW IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind EnumSystemLocalesW SetCurrentDirectoryW GetCurrentDirectoryW FlsAlloc HeapReAlloc HeapSize GetCurrentThread RtlLookupFunctionEntry RtlCaptureContext DecodePointer GetLastError EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObject CreateEventW lstrlenW WideCharToMultiByte CreateFileW FindClose FindFirstFileW GetLocaleInfoW GetFileAttributesW GetFileSizeEx GetFullPathNameW DebugBreak OutputDebugStringW CloseHandle SetLastError GetProcessTimes OpenProcess GetSystemTime ReadProcessMemory FreeLibrary GetProcAddress LoadLibraryW lstrlenA CopyFileW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime MultiByteToWideChar VerSetConditionMask GetCommandLineW RaiseException GetCurrentThreadId GetModuleFileNameW GetModuleHandleW LoadLibraryExW LoadResource SizeofResource FindResourceW MulDiv lstrcmpW lstrcmpiW VerifyVersionInfoW CompareStringW GetFileInformationByHandle ReadFile WriteFile CreateMutexW GetCurrentProcess GetCurrentProcessId TerminateProcess GetExitCodeProcess CreateThread CreateProcessW CreateToolhelp32Snapshot Process32FirstW Process32NextW InitializeCriticalSection Sleep GetSystemInfo CreateFileMappingW MapViewOfFile UnmapViewOfFile GlobalAlloc GlobalUnlock GlobalLock GetSystemDirectoryA LoadLibraryA GetTimeZoneInformation CreateDirectoryW GetFileAttributesExW GetTempFileNameW GetTempPathW GlobalFree FormatMessageW GetPrivateProfileStringW WritePrivateProfileStringW SystemTimeToFileTime OpenFileMappingW TlsAlloc LoadLibraryExA VirtualFree VirtualAlloc FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead GetProcessHeap HeapFree HeapAlloc EncodePointer IsDebuggerPresent GetUserDefaultLCID SetStdHandle GetConsoleMode ReadConsoleW GetConsoleOutputCP SetFilePointerEx SetConsoleCtrlHandler FlushFileBuffers FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetStringTypeW SetEndOfFile FindNextFileW WriteConsoleW TlsGetValue TlsSetValue TlsFree GetDriveTypeW GetFileType PeekNamedPipe ExitProcess GetModuleHandleExW GetStdHandle

user32

DestroyMenu EnableMenuItem GetSubMenu DeleteMenu TrackPopupMenu SetMenuItemInfoW SetWindowTextW GetWindow CheckMenuRadioItem MonitorFromPoint MonitorFromWindow GetMonitorInfoW PostQuitMessage FlashWindow MoveWindow DialogBoxParamW EnableWindow GetMenu DrawIcon DrawTextExW AdjustWindowRectEx MessageBoxW CopyRect LoadIconW GetIconInfo IsDialogMessageW PostMessageW SetProcessDefaultLayout CharUpperW SetTimer KillTimer DrawTextExA SetScrollInfo GetScrollInfo AnimateWindow OpenClipboard CloseClipboard SetClipboardData EmptyClipboard GetSystemMetrics IntersectRect EnumWindows GetWindowThreadProcessId GetDesktopWindow GetCursorInfo ScreenToClient GetCursorPos SetCursor GetActiveWindow GetClientRect GetWindowTextLengthW GetWindowTextW RedrawWindow InvalidateRect SetWindowLongPtrW GetWindowLongPtrW SetWindowLongW GetWindowLongW PtInRect OffsetRect SetRectEmpty FillRect EndPaint BeginPaint ReleaseDC GetDC UpdateWindow DrawTextW IsWindowEnabled ReleaseCapture SetCapture GetCapture GetKeyState GetFocus SetFocus GetDlgCtrlID GetDlgItem CreateDialogParamW IsWindowVisible SetWindowPos ShowWindow DestroyWindow IsWindow CreateWindowExW CallWindowProcW DefWindowProcW SendMessageW PeekMessageW DispatchMessageW TranslateMessage GetMessageW GetGuiResources CharNextW UnregisterClassW LoadStringW DrawFocusRect GetSysColorBrush LoadMenuW EndDialog SystemParametersInfoW LoadImageW DestroyIcon LoadCursorW GetClassNameW GetWindowRect GetParent GetSysColor EnumDisplayMonitors MapWindowPoints

ole32

CoUninitialize CoCreateInstance CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree CoInitialize CoCreateGuid

oleaut32

VarI4FromStr VarR8FromStr VarDateFromStr VarUI4FromStr VarDecCmp VarDecFromStr SysFreeString

advapi32

RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyExW RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExW RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW RegEnumValueW RegCreateKeyExW

comctl32

_TrackMouseEvent ImageList_Create ImageList_Destroy ImageList_ReplaceIcon ImageList_Remove InitCommonControlsEx

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-31_ee4d358983cb30037ff27a89fce179df_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar

ws2_32

dnsapi

wininet

rpcrt4

gdi32

shell32

comdlg32

version

psapi

kernel32

user32

ole32

oleaut32

advapi32

comctl32

generic