General
- Target 2026-09-13_d463c7e812cd5fd5146164be1da8bfc5_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 67.3MB
- Sample260913-lv8jcsaa64
- SHA256 d623516912ef4cef006fab974e0e558c8eca7bbd8d3ac5bcebbbd15735ab09f2
- MD5 d463c7e812cd5fd5146164be1da8bfc5
- SHA1 6d2ccadb87332c0a21203df5fb4d3288306a766c
- SHA512 fa28b036c1f6f3111e1b4eb8a93572f26ec5530513ea3c2f542baaef0a6bde9b3a798fdfea476ead283b8acf718df2c1a5f3e4d6e24294b5e4e325af9eb74139
- SSDEEP 1572864:dKFCKai5Vd1AEJ5Rh1+BDDy4gds8KN2Q+4OHzDCd52yxqqlUMHY:d87aeVd1AY5bADDxgds8vhnCdTqqx
- TLSH T1F1F73385FB106985E22DA334C972CA19A575F45D822F4C031AF40C3B3F6B7EE99ECA51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-09-13_d463c7e812cd5fd5146164be1da8bfc5_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_d463c7e812cd5fd5146164be1da8bfc5_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_d463c7e812cd5fd5146164be1da8bfc5_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 67.3MB
- SHA256 d623516912ef4cef006fab974e0e558c8eca7bbd8d3ac5bcebbbd15735ab09f2
- MD5 d463c7e812cd5fd5146164be1da8bfc5
- SHA1 6d2ccadb87332c0a21203df5fb4d3288306a766c
- SHA512 fa28b036c1f6f3111e1b4eb8a93572f26ec5530513ea3c2f542baaef0a6bde9b3a798fdfea476ead283b8acf718df2c1a5f3e4d6e24294b5e4e325af9eb74139
- SSDEEP 1572864:dKFCKai5Vd1AEJ5Rh1+BDDy4gds8KN2Q+4OHzDCd52yxqqlUMHY:d87aeVd1AY5bADDxgds8vhnCdTqqx
- TLSH T1F1F73385FB106985E22DA334C972CA19A575F45D822F4C031AF40C3B3F6B7EE99ECA51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.