General

  • Target
    2026-09-21_699d8bf7b006d61e525350251d239f3e_cobalt-strike_glassworm_hijackloader_icedid_luca-stealer_njrat_satacom_stealc_vidar
  • Size 17.2MB
  • Sample260922-pt342atsfx
  • SHA256 0c4b1755ccc8f23f44809b2ccb9fdf8fb83e24634374eb98b948efa6241115d5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-09-21_699d8bf7b006d61e525350251d239f3e_cobalt-strike_glassworm_hijackloader_icedid_luca-stealer_njrat_satacom_stealc_vidar
    .exe 17.2MB

2026-09-21_699d8bf7b006d61e525350251d239f3e_cobalt-strike_glassworm_hijackloader_icedid_luca-stealer_njrat_satacom_stealc_vidar

  • IMPHASH 970f612decc016bab865ce799b93c1c8
  • SHA256 0c4b1755ccc8f23f44809b2ccb9fdf8fb83e24634374eb98b948efa6241115d5
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
ed:8a:ad:cd:59:53:4e:ed:23:54:3a:91:82:85:e9:4e:fa:4c:36:4d:a8:61:d4:7e:4b:ed:e5:06:ae:da:33:80
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Autodesk\, Inc.,O=Autodesk\, Inc.,L=San Francisco,ST=California,C=US
Minor OS version
0
Major OS version
6
Entry point
7262496
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
E:\jenkins\workspace\_Bootstrap_release_PDFY26JAN_1.0\target\Windows\x64\symbols\Release\Setup.pdb