General
- Target 2026-09-24_b3f7ff78266465e12f903fbf569c2667_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 12.5MB
- Sample260924-dl8trscf47
- SHA256 b7fedad13497b4a5c65c802581d5c311bfe1f9235925e5c1d4228671af0e498f
- MD5 b3f7ff78266465e12f903fbf569c2667
- SHA1 c72548f31e4aaa66a4221c63d0fba754af72708a
- SHA512 c91ef4b696dff0ca7a94809ab7286e8a609e195296b811fb75058ca07c837a2b678f089c003e43b09d926e5fe7979e06bdd440a91b2c1cb23f4457de3e24b355
- SSDEEP 196608:pJjojYIYNj3XJy2KfMQHVRzq05OyagY4YVcKxP:pJ8jYIYNj3XJy2KfMQK0zaQYVpP
- TLSH T138D63A157B5B95A8C0ABC07482878A675D7030DB0B35AAFF5484963D2F7ABF46F38318
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_b3f7ff78266465e12f903fbf569c2667_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_b3f7ff78266465e12f903fbf569c2667_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_b3f7ff78266465e12f903fbf569c2667_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 12.5MB
- SHA256 b7fedad13497b4a5c65c802581d5c311bfe1f9235925e5c1d4228671af0e498f
- MD5 b3f7ff78266465e12f903fbf569c2667
- SHA1 c72548f31e4aaa66a4221c63d0fba754af72708a
- SHA512 c91ef4b696dff0ca7a94809ab7286e8a609e195296b811fb75058ca07c837a2b678f089c003e43b09d926e5fe7979e06bdd440a91b2c1cb23f4457de3e24b355
- SSDEEP 196608:pJjojYIYNj3XJy2KfMQHVRzq05OyagY4YVcKxP:pJ8jYIYNj3XJy2KfMQK0zaQYVpP
- TLSH T138D63A157B5B95A8C0ABC07482878A675D7030DB0B35AAFF5484963D2F7ABF46F38318
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.