2026-09-21_6a369a22dd2c595505e32dbe70c941bc_cobalt-strike_glassworm_icedid_satacom_stealc_vidar

General

Target
2026-09-21_6a369a22dd2c595505e32dbe70c941bc_cobalt-strike_glassworm_icedid_satacom_stealc_vidar
Size 257KB
Sample260922-ptvsnaee54
SHA256 f53af28ace72ecf0f4d5d03c1e876b2c4b6d9d260a381f72209db9bda4cf2095
MD5 6a369a22dd2c595505e32dbe70c941bc
SHA1 f074a68afa06861998702d3d2659fe534f5934df
SHA512 d10b42b371d5eb3fecfbe6c6b938ff8c34af93e60585c7ae8549e2f71e862bb3ac924383883ca706348baaa7cf4d866b30b664551510106caa5d761282ff0e8a
SSDEEP 3072:Bp4ycLn+IXAdSsFiwIabze0jc1lqJHgr6nwqcKtbstkORuseVo5SKoY46NdjNKVv:BPvAsFiwIcXjc1lqJHgOnwqnzyohHx
TLSH
T116446C1A72A90CF8EDB7813DC9425A46E6B2B8160770D6EF03A043675F276D19D3FB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-21_6a369a22dd2c595505e32dbe70c941bc_cobalt-strike_glassworm_icedid_satacom_stealc_vidar

File Explorer

2026-09-21_6a369a22dd2c595505e32dbe70c941bc_cobalt-strike_glassworm_icedid_satacom_stealc_vidar

.exe 257KB

2026-09-21_6a369a22dd2c595505e32dbe70c941bc_cobalt-strike_glassworm_icedid_satacom_stealc_vidar

IMPHASH 006572e9009ec6d03cc9f702cce285da
SHA256 f53af28ace72ecf0f4d5d03c1e876b2c4b6d9d260a381f72209db9bda4cf2095
MD5 6a369a22dd2c595505e32dbe70c941bc
SHA1 f074a68afa06861998702d3d2659fe534f5934df
SHA512 d10b42b371d5eb3fecfbe6c6b938ff8c34af93e60585c7ae8549e2f71e862bb3ac924383883ca706348baaa7cf4d866b30b664551510106caa5d761282ff0e8a
SSDEEP 3072:Bp4ycLn+IXAdSsFiwIabze0jc1lqJHgr6nwqcKtbstkORuseVo5SKoY46NdjNKVv:BPvAsFiwIcXjc1lqJHgOnwqnzyohHx
TLSH
T116446C1A72A90CF8EDB7813DC9425A46E6B2B8160770D6EF03A043675F276D19D3FB21
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

53928

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHGetFolderPathW

kernel32

GetCurrentThreadId WriteConsoleW GetDriveTypeW GetFileAttributesW GetLogicalDrives SetFileAttributesW WideCharToMultiByte LocalFree FormatMessageA CreateFileW FindClose FindFirstFileExW FindNextFileW GetFileAttributesExW SetEndOfFile SetFilePointerEx CloseHandle GetLastError GetFileInformationByHandleEx MultiByteToWideChar EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId RtlUnwind GetSystemTimeAsFileTime InitializeSListHead GetCurrentProcess TerminateProcess HeapSize RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile HeapFree HeapAlloc LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx ReadConsoleW HeapReAlloc IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-21_6a369a22dd2c595505e32dbe70c941bc_cobalt-strike_glassworm_icedid_satacom_stealc_vidar

shell32

kernel32

generic