General
- Target 2026-09-11_8a514295e9a543bed64e230e403a62b1_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 26.8MB
- Sample260912-jrdtgatzas
- SHA256 293b3d9e6fb5016c5096a3d4ef096c14db4554a5e9aa5c6dbdc79e215aec7273
- MD5 8a514295e9a543bed64e230e403a62b1
- SHA1 194bb7015e540bce43438f85641bc9c59ab888ba
- SHA512 fe84db684df863131f723e5fad3b79ab411229630a4430aaf477b441b8f058554b966a455cf1c295b67caba24274a5e521acaf2272861fbae320d6f1287eef92
- SSDEEP 393216:DBFyVQtsTUiy4EBk3meBcGfd0CaHW8p2MnD9j8h8XeAzzNzjq1gz:DaVQtsYiy1aj5F0HW8p2U5jw8X9zCg
- TLSH T178573306A22618B4E9C71437E140C5B63A6338595FA5C28F0BB87C540FDB6ECBD79FA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-09-11_8a514295e9a543bed64e230e403a62b1_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-11_8a514295e9a543bed64e230e403a62b1_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-11_8a514295e9a543bed64e230e403a62b1_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 26.8MB
- SHA256 293b3d9e6fb5016c5096a3d4ef096c14db4554a5e9aa5c6dbdc79e215aec7273
- MD5 8a514295e9a543bed64e230e403a62b1
- SHA1 194bb7015e540bce43438f85641bc9c59ab888ba
- SHA512 fe84db684df863131f723e5fad3b79ab411229630a4430aaf477b441b8f058554b966a455cf1c295b67caba24274a5e521acaf2272861fbae320d6f1287eef92
- SSDEEP 393216:DBFyVQtsTUiy4EBk3meBcGfd0CaHW8p2MnD9j8h8XeAzzNzjq1gz:DaVQtsYiy1aj5F0HW8p2U5jw8X9zCg
- TLSH T178573306A22618B4E9C71437E140C5B63A6338595FA5C28F0BB87C540FDB6ECBD79FA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.