General
- Target 2026-09-13_aa3116d332403a07e83d6c2873db35ca_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc
- Size 997KB
- Sample260913-nrfqaawemd
- SHA256 4685f82f7cd9cdd0106ee7a52f6a08a5f1838225a109596da535d68990ea23f7
- MD5 aa3116d332403a07e83d6c2873db35ca
- SHA1 b7eb05bd840f13616865ac586ed9d953c3fe7434
- SHA512 6c9a1997502fb27583f2c146ee6dd8c21e16ad325f0ab5715c7a9f7b3803d6f09953801957cab2505daa62268992bc113abedb1c1e1a27dd71f5b99ad23593c8
- SSDEEP 24576:m5OLonP+ZjxtqC5LUyZ+YwnEM/NVu+Ry6:WOLJZjR+ke9Ry
- TLSH T198257D2ED79402BCE0B7D2B5CE868952E7B2744A437069DB07D089674F376E05A3EF12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-09-13_aa3116d332403a07e83d6c2873db35ca_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_aa3116d332403a07e83d6c2873db35ca_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_aa3116d332403a07e83d6c2873db35ca_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc
- Size 997KB
- SHA256 4685f82f7cd9cdd0106ee7a52f6a08a5f1838225a109596da535d68990ea23f7
- MD5 aa3116d332403a07e83d6c2873db35ca
- SHA1 b7eb05bd840f13616865ac586ed9d953c3fe7434
- SHA512 6c9a1997502fb27583f2c146ee6dd8c21e16ad325f0ab5715c7a9f7b3803d6f09953801957cab2505daa62268992bc113abedb1c1e1a27dd71f5b99ad23593c8
- SSDEEP 24576:m5OLonP+ZjxtqC5LUyZ+YwnEM/NVu+Ry6:WOLJZjR+ke9Ry
- TLSH T198257D2ED79402BCE0B7D2B5CE868952E7B2744A437069DB07D089674F376E05A3EF12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VMWare services registry key.