General
- Target 2026-09-27_89073da61779e416950d2580164d230e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 7.1MB
- Sample260928-dz2mlsts9j
- SHA256 17bdd8a52ab7307256ba4248f7522eb184c5a79b6632225d79d339a24faf7841
- MD5 89073da61779e416950d2580164d230e
- SHA1 b2f39c06d64d2c6078c2dce83163bdf2c5d7e6cd
- SHA512 99a14c45e2254103d55ac5d9f90c23fee7c8322f83120d7e618ee71dde7d45e312ce7f73d48046c6bbf4a5deba24a3bc35f4a331f60e93d8c5a115682de6edec
- SSDEEP 49152:qyl+Y3cFZEeLnksViQXdJj2U2/d4yEczkncfj+1JDx9YAlSNCZzNK4R5sUxTFJK1:qYOxdcfaTvECZz84hCnfOdwbS/8c
- TLSH T16D764B84A3E9C1D4D462C13DC9064AF7EAB1BC51E130EAAF10597F5A3F732924D2A763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-27_89073da61779e416950d2580164d230e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-27_89073da61779e416950d2580164d230e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-27_89073da61779e416950d2580164d230e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 7.1MB
- SHA256 17bdd8a52ab7307256ba4248f7522eb184c5a79b6632225d79d339a24faf7841
- MD5 89073da61779e416950d2580164d230e
- SHA1 b2f39c06d64d2c6078c2dce83163bdf2c5d7e6cd
- SHA512 99a14c45e2254103d55ac5d9f90c23fee7c8322f83120d7e618ee71dde7d45e312ce7f73d48046c6bbf4a5deba24a3bc35f4a331f60e93d8c5a115682de6edec
- SSDEEP 49152:qyl+Y3cFZEeLnksViQXdJj2U2/d4yEczkncfj+1JDx9YAlSNCZzNK4R5sUxTFJK1:qYOxdcfaTvECZz84hCnfOdwbS/8c
- TLSH T16D764B84A3E9C1D4D462C13DC9064AF7EAB1BC51E130EAAF10597F5A3F732924D2A763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)