General
- Target 2026-09-10_de9ae082cbf97898035e76adc3bee2c0_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 76.2MB
- Sample260910-lref4st1gy
- SHA256 a714439842cc0b9029a3845454907e85b2f8f76379603fab17cb14d40b7d146d
- MD5 de9ae082cbf97898035e76adc3bee2c0
- SHA1 9f847b88b230a57ce3fc7f18706a3f280fca31dc
- SHA512 5f1fee19dd084a0f9752d73891f7622094389f38f6cbf5445cc85c131e6e30eb27014c6eef031906a666cd7643ab3c386e952fe097cea9897346e5a780208e56
- SSDEEP 1572864:3RWMQ8axbo+ZyihINx9JbgtNViBszaNOXWxtQSNPiIW2qHWB75iVqRWfCy4en4:3UMgxnhcTJUfVi6acKCMW2qHO5iVivD
- TLSH T14908331AA74354EAF78E41379662CB1464B1B80D5237CA5B1BF8383119CF2EA4D3FB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-09-10_de9ae082cbf97898035e76adc3bee2c0_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_de9ae082cbf97898035e76adc3bee2c0_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_de9ae082cbf97898035e76adc3bee2c0_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 76.2MB
- SHA256 a714439842cc0b9029a3845454907e85b2f8f76379603fab17cb14d40b7d146d
- MD5 de9ae082cbf97898035e76adc3bee2c0
- SHA1 9f847b88b230a57ce3fc7f18706a3f280fca31dc
- SHA512 5f1fee19dd084a0f9752d73891f7622094389f38f6cbf5445cc85c131e6e30eb27014c6eef031906a666cd7643ab3c386e952fe097cea9897346e5a780208e56
- SSDEEP 1572864:3RWMQ8axbo+ZyihINx9JbgtNViBszaNOXWxtQSNPiIW2qHWB75iVqRWfCy4en4:3UMgxnhcTJUfVi6acKCMW2qHO5iVivD
- TLSH T14908331AA74354EAF78E41379662CB1464B1B80D5237CA5B1BF8383119CF2EA4D3FB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.