General
- Target 2026-09-25_dc2803cce7f2739445ebf96b84e2f9be_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 12.5MB
- Sample260925-xefzystgnc
- SHA256 d81af51ec8246875f0c205926fea880cc634b7cf44ab8fba1c559294f0e934c3
- MD5 dc2803cce7f2739445ebf96b84e2f9be
- SHA1 14a4c9b74be97e302e23d3c1da1bc16f442f8e4a
- SHA512 6858f1e58415f5fbf5c073b8674089a3ee2913ad5303f6851cc132a50e44d0c4d573400b8af56f09a41a6452d8f03eb32e1dc72328f655cfc935e071b290dacb
- SSDEEP 196608:4JjojYIYNj3XJy2KfMQzVRzqz5+yWKY4YVcYxP:4J8jYIYNj3XJy2KfMQuzLW+YVzP
- TLSH T1F6D63A157B5B95A8C0ABC07482878A675D7030CB0B35AAFF5584963D2F7ABF46F38318
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-25_dc2803cce7f2739445ebf96b84e2f9be_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-25_dc2803cce7f2739445ebf96b84e2f9be_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-25_dc2803cce7f2739445ebf96b84e2f9be_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 12.5MB
- SHA256 d81af51ec8246875f0c205926fea880cc634b7cf44ab8fba1c559294f0e934c3
- MD5 dc2803cce7f2739445ebf96b84e2f9be
- SHA1 14a4c9b74be97e302e23d3c1da1bc16f442f8e4a
- SHA512 6858f1e58415f5fbf5c073b8674089a3ee2913ad5303f6851cc132a50e44d0c4d573400b8af56f09a41a6452d8f03eb32e1dc72328f655cfc935e071b290dacb
- SSDEEP 196608:4JjojYIYNj3XJy2KfMQzVRzqz5+yWKY4YVcYxP:4J8jYIYNj3XJy2KfMQuzLW+YVzP
- TLSH T1F6D63A157B5B95A8C0ABC07482878A675D7030CB0B35AAFF5584963D2F7ABF46F38318
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.