General
- Target 2026-09-03_cbe3dae4cc23fec99ea62c87dcc91f03_cobalt-strike_glassworm_hijackloader_icedid_njrat_stealc_vidar
- Size 12.2MB
- Sample260903-2htgnsxcqd
- SHA256 b8a12662df4c04bbf7f77886e9b1462dab912892ed21eac198fa80d245be16d0
- MD5 cbe3dae4cc23fec99ea62c87dcc91f03
- SHA1 1e719919841770d20a48485b5a89e73db3cec6e6
- SHA512 9b1ec8357d3ec815332afd3b94229a4d54ac49767c21b4fc725080eec50eeab4e368372905c997e5acd870fe06ade55b05d9f5c36fa95b4cb139d9a2a142bb9d
- SSDEEP 393216:yv4I40A9YH1AOygqn2YPa4zg23fyRTAqS04zg2aYyRi:cyIaa4hyREZ04zyRi
- TLSH T136D6F1299A6E05EAC4B7E1B8D5259A5BE1B57814173182CB27900FAD3F337C16E363C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_cbe3dae4cc23fec99ea62c87dcc91f03_cobalt-strike_glassworm_hijackloader_icedid_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_cbe3dae4cc23fec99ea62c87dcc91f03_cobalt-strike_glassworm_hijackloader_icedid_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_cbe3dae4cc23fec99ea62c87dcc91f03_cobalt-strike_glassworm_hijackloader_icedid_njrat_stealc_vidar
- Size 12.2MB
- SHA256 b8a12662df4c04bbf7f77886e9b1462dab912892ed21eac198fa80d245be16d0
- MD5 cbe3dae4cc23fec99ea62c87dcc91f03
- SHA1 1e719919841770d20a48485b5a89e73db3cec6e6
- SHA512 9b1ec8357d3ec815332afd3b94229a4d54ac49767c21b4fc725080eec50eeab4e368372905c997e5acd870fe06ade55b05d9f5c36fa95b4cb139d9a2a142bb9d
- SSDEEP 393216:yv4I40A9YH1AOygqn2YPa4zg23fyRTAqS04zg2aYyRi:cyIaa4hyREZ04zyRi
- TLSH T136D6F1299A6E05EAC4B7E1B8D5259A5BE1B57814173182CB27900FAD3F337C16E363C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.