General
- Target 2026-09-03_ccd9d7862bbf4f506bd3a0eab96e7a57_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 76.0MB
- Sample260903-2eet4sttew
- SHA256 9e748eeeabead9544cca7220b912b7b6a3c99874d9fb6e70b0129de979cf1c1d
- MD5 ccd9d7862bbf4f506bd3a0eab96e7a57
- SHA1 98da5c359adf67a55ddd51014165ce5914df1f59
- SHA512 5d4ab57c290f0122dcb97805b5a297c0087cc903b5257a0d28ec9cb07144992fb3461d383be6de6688403d38eb1dea8336256f8d36c2b3f0ba627de9948af6d4
- SSDEEP 1572864:jRWMQz4gFP/V4f6Gj53ikjt4jRq2GqFOPV5FiIW2qHWB75iVf6KWxICFYx8:jUMfgt/VG6RmtCRlGPr5W2qHO5iVf6KE
- TLSH T17908336C97861CEDE6DE6037F244CB1A6862B40E1331D19B97F415304ECF2FB4AB9A61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-09-03_ccd9d7862bbf4f506bd3a0eab96e7a57_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_ccd9d7862bbf4f506bd3a0eab96e7a57_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_ccd9d7862bbf4f506bd3a0eab96e7a57_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 76.0MB
- SHA256 9e748eeeabead9544cca7220b912b7b6a3c99874d9fb6e70b0129de979cf1c1d
- MD5 ccd9d7862bbf4f506bd3a0eab96e7a57
- SHA1 98da5c359adf67a55ddd51014165ce5914df1f59
- SHA512 5d4ab57c290f0122dcb97805b5a297c0087cc903b5257a0d28ec9cb07144992fb3461d383be6de6688403d38eb1dea8336256f8d36c2b3f0ba627de9948af6d4
- SSDEEP 1572864:jRWMQz4gFP/V4f6Gj53ikjt4jRq2GqFOPV5FiIW2qHWB75iVf6KWxICFYx8:jUMfgt/VG6RmtCRlGPr5W2qHO5iVf6KE
- TLSH T17908336C97861CEDE6DE6037F244CB1A6862B40E1331D19B97F415304ECF2FB4AB9A61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.