2026-09-04_26dceaa37c7edbedec99d68f1ca609f8_cobalt-strike_funksec_glassworm_icedid_luca-stealer_njrat_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-04_26dceaa37c7edbedec99d68f1ca609f8_cobalt-strike_funksec_glassworm_icedid_luca-stealer_njrat_vidar
Size 6.5MB
Sample260905-th7ejaxgpg
SHA256 126bdeda4c0e08988d3ed2047175e9bf9a92f987fb32b27a33f1cf8d838984df
MD5 26dceaa37c7edbedec99d68f1ca609f8
SHA1 8d118311922f0d87f9a39eac3332cfb62f99cd3e
SHA512 4ac2f5ff8911e495f106348db46fe8526ac16964267846809629718318c517d32bf98319e737d541b41dda295c090a507ca047f0f0b80a7d1271c2412a8d0aed
SSDEEP 98304:Q0xHMIdY0iqjnG+c2ihtpguChUs5qOv9BAUZLtqy:QvIL15cry5qOVV0
TLSH
T1EE667C0E72A241E8D65ED138AD525E26D6B1BC0D072266DB43D0A7271FE37E00E7BB17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-04_26dceaa37c7edbedec99d68f1ca609f8_cobalt-strike_funksec_glassworm_icedid_luca-stealer_njrat_vidar

File Explorer

2026-09-04_26dceaa37c7edbedec99d68f1ca609f8_cobalt-strike_funksec_glassworm_icedid_luca-stealer_njrat_vidar

.exe 6.5MB

2026-09-04_26dceaa37c7edbedec99d68f1ca609f8_cobalt-strike_funksec_glassworm_icedid_luca-stealer_njrat_vidar

IMPHASH c84216b81eef23939888ca0fd43f2152
SHA256 126bdeda4c0e08988d3ed2047175e9bf9a92f987fb32b27a33f1cf8d838984df
MD5 26dceaa37c7edbedec99d68f1ca609f8
SHA1 8d118311922f0d87f9a39eac3332cfb62f99cd3e
SHA512 4ac2f5ff8911e495f106348db46fe8526ac16964267846809629718318c517d32bf98319e737d541b41dda295c090a507ca047f0f0b80a7d1271c2412a8d0aed
SSDEEP 98304:Q0xHMIdY0iqjnG+c2ihtpguChUs5qOv9BAUZLtqy:QvIL15cry5qOVV0
TLSH
T1EE667C0E72A241E8D65ED138AD525E26D6B1BC0D072266DB43D0A7271FE37E00E7BB17
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2523668

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

picounlock.pdb

opengl32

wglMakeCurrent wglShareLists wglCreateContext wglGetProcAddress glEnable glDisable glScissor wglDeleteContext

advapi32

RegOpenKeyExW SystemFunction036 RegQueryValueExW RegCloseKey

ntdll

RtlLookupFunctionEntry RtlVirtualUnwind RtlCaptureContext RtlNtStatusToDosError

shell32

CommandLineToArgvW

kernel32

SetConsoleCP GetConsoleOutputCP SetConsoleOutputCP CreateIoCompletionPort InitializeCriticalSectionAndSpinCount InitializeConditionVariable GetNativeSystemInfo EnterCriticalSection GetCurrentThreadId LeaveCriticalSection AddVectoredExceptionHandler SetThreadStackGuarantee WakeConditionVariable GetCurrentDirectoryW GetCurrentProcess GetCurrentThread GetLastError DuplicateHandle GetCurrentThreadStackLimits FormatMessageW SleepConditionVariableCS SetThreadDescription VirtualAlloc VirtualFree DeleteCriticalSection SwitchToThread GetStdHandle WriteFile SetLastError GetEnvironmentVariableW GetConsoleMode SetConsoleMode GetFileType CloseHandle SetFilePointerEx GetOverlappedResult LoadLibraryExW GetProcAddress CreateWaitableTimerExW CancelIoEx QueryPerformanceCounter QueryPerformanceFrequency PostQueuedCompletionStatus SetWaitableTimer CancelWaitableTimer WakeAllConditionVariable GetQueuedCompletionStatusEx GetModuleFileNameW GetFullPathNameW CreateFileW DeviceIoControl GetFileInformationByHandleEx WideCharToMultiByte Sleep SetFileCompletionNotificationModes LocalFree ReadFile ReadConsoleW GetFileAttributesExW FindFirstFileW FindClose GetFileInformationByHandle GetDynamicTimeZoneInformation GetSystemTimePreciseAsFileTime CreateProcessW GetCurrentProcessId CreateNamedPipeA ReOpenFile ResumeThread UnregisterWaitEx RegisterWaitForSingleObject GetExitCodeProcess CreateDirectoryW TerminateProcess ReleaseMutex WaitForSingleObject CreateMutexA GetSystemInfo DebugBreak SetEvent ResetEvent CreateEventA CreateThread ExitThread GetExitCodeThread SuspendThread GetThreadContext VirtualQuery GetModuleHandleA GetProcessAffinityMask GetEnvironmentVariableA CreateFileA SetFilePointer InitializeCriticalSection GetTickCount IsValidCodePage GetModuleFileNameA LoadLibraryA SetUnhandledExceptionFilter VirtualProtect GlobalAlloc GlobalFree UnhandledExceptionFilter IsProcessorFeaturePresent GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW GetACP RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedPushEntrySList InterlockedFlushSList EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetTickCount64 GetCurrentProcessorNumber FlushProcessWriteBuffers CreateSemaphoreExW CreateEventExW InitOnceExecuteOnce TryAcquireSRWLockExclusive SetEndOfFile GetTimeZoneInformation GetConsoleCP ExitProcess GetModuleHandleExW FreeLibraryAndExitThread GetCommandLineA GetCommandLineW GetCPInfo HeapAlloc HeapFree GetTempPathW FlsAlloc CreateFileMappingA FlsSetValue FlsFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW OutputDebugStringW FindFirstFileExW FindNextFileW GetOEMCP MultiByteToWideChar GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap SetConsoleCtrlHandler GetFileSizeEx HeapSize HeapReAlloc FlushFileBuffers WriteConsoleW FormatMessageA GetLocaleInfoEx SetCurrentDirectoryW GetDiskFreeSpaceExW GetFileAttributesW GetFinalPathNameByHandleW SetFileAttributesW SetFileInformationByHandle SetFileTime AreFileApisANSI CreateDirectoryExW CopyFileW MoveFileExW CreateHardLinkW CreateSymbolicLinkW DecodePointer InitializeCriticalSectionEx LCMapStringEx CompareStringEx GlobalUnlock GlobalLock LoadLibraryW ReleaseSRWLockExclusive AcquireSRWLockExclusive SleepConditionVariableSRW RtlUnwind FreeLibraryWhenCallbackReturns CreateThreadpoolTimer SetThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer CreateThreadpoolWait SetThreadpoolWait CloseThreadpoolWait MapViewOfFile UnmapViewOfFile FreeLibrary FlsGetValue

dbghelp

SymInitializeW StackWalk64 SymSetOptions SymFromAddrW SymGetLineFromAddrW64 SymGetModuleBase64 SymGetOptions SymGetModuleInfoW64

user32

SetClipboardData GetClipboardData EmptyClipboard IsClipboardFormatAvailable TrackMouseEvent TranslateMessage DispatchMessageW PeekMessageW SendMessageW RegisterDeviceNotificationW DefWindowProcW CallWindowProcW RegisterClassW UnregisterClassW CreateWindowExW DestroyWindow ShowWindow FlashWindowEx SetWindowPos GetKeyState GetCapture CloseClipboard DestroyCursor GetForegroundWindow SetForegroundWindow SetWindowTextW GetClientRect GetWindowRect AdjustWindowRect SetCursor MapWindowPoints ClipCursor GetWindowLongPtrW SetWindowLongPtrW GetWindowThreadProcessId CreateIcon DestroyIcon ChangeDisplaySettingsW GetRawInputData RegisterRawInputDevices CreateWindowExA LoadCursorW ReleaseDC OpenClipboard SetCapture CreateIconIndirect GetDC ScreenToClient MapVirtualKeyW GetKeyNameTextW GetAsyncKeyState EnumDisplaySettingsW ClientToScreen GetCursorPos SetCursorPos ReleaseCapture GetSystemMetrics

winmm

joyGetPosEx joyGetDevCapsW timeGetDevCaps timeBeginPeriod timeEndPeriod

gdi32

GetDeviceCaps CreateDIBSection CreateBitmap ChoosePixelFormat DescribePixelFormat GetPixelFormat SetPixelFormat SwapBuffers DeleteObject

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-04_26dceaa37c7edbedec99d68f1ca609f8_cobalt-strike_funksec_glassworm_icedid_luca-stealer_njrat_vidar

opengl32

advapi32

ntdll

shell32

kernel32

dbghelp

user32

winmm

gdi32

generic