General
- Target 2026-09-12_3f8b6f0a9f4298d5707926222e38c61e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 1.9MB
- Sample260913-dlh84sec78
- SHA256 d16c9d2d062f07ffd0b3fd34e102f69bafd1f23caece5eeec0219d1d5e79facf
- MD5 3f8b6f0a9f4298d5707926222e38c61e
- SHA1 f482775b91419bc0956aa61c5adcd7c4df212446
- SHA512 979fe46997a45a440f5f2ae23362cec289be4127516cd530a2c73b24fadddb3f8246387172eb5ba86d30d38eb91e686e125c1f5fdb26110814df7dd8eeebf62c
- SSDEEP 49152:xa6s+44nK+pyUIn5s40/ksNYNlCMuGayPu4ZPzwFI/wOifnzH:O+2n5s4VnYtH
- TLSH T12E95BF2AA66841FDD17BD178C6465907EBB1780203B18ADF07A10A662F77BF11F7EB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_3f8b6f0a9f4298d5707926222e38c61e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_3f8b6f0a9f4298d5707926222e38c61e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_3f8b6f0a9f4298d5707926222e38c61e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 1.9MB
- SHA256 d16c9d2d062f07ffd0b3fd34e102f69bafd1f23caece5eeec0219d1d5e79facf
- MD5 3f8b6f0a9f4298d5707926222e38c61e
- SHA1 f482775b91419bc0956aa61c5adcd7c4df212446
- SHA512 979fe46997a45a440f5f2ae23362cec289be4127516cd530a2c73b24fadddb3f8246387172eb5ba86d30d38eb91e686e125c1f5fdb26110814df7dd8eeebf62c
- SSDEEP 49152:xa6s+44nK+pyUIn5s40/ksNYNlCMuGayPu4ZPzwFI/wOifnzH:O+2n5s4VnYtH
- TLSH T12E95BF2AA66841FDD17BD178C6465907EBB1780203B18ADF07A10A662F77BF11F7EB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1