Analysis
- max time kernel
148s - max time network
128s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 14:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_070f8b7639644c0ce5ffe18b95e5cf93_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_070f8b7639644c0ce5ffe18b95e5cf93_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-09-30_070f8b7639644c0ce5ffe18b95e5cf93_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe
- Size 1.3MB
- Sample260930-rmhwmahd49
- SHA256 a67f9ab850aa3de517fd635d391d67065c7391cf59789b840324549a3c08c164
- MD5 070f8b7639644c0ce5ffe18b95e5cf93
- SHA1 c1b7c7e171f90205f59b679ae90ddb9fd0a789e6
- SHA512 fac50693bdfe09befb4caad0c4b75ee3ff1e1002c35b37d3776cbd236ed98923feded64be1d60ea6fa44dbb109626f3d21588051d0a803868b745747095a0533
- SSDEEP 24576:wwdJ+Nl9N8xUD85eLZBjGjfkOD/KwZ3PpfkBumEx4mja:Tylb8xUwQl0jT/H3PNkomDm2
- TLSH T13A559F0777EAC0E5CE7F81F6C9525212E731B8601B389BDB2590861EDF63ED05A3AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2072 2026-09-30_070f8b7639644c0ce5ffe18b95e5cf93_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-30_070f8b7639644c0ce5ffe18b95e5cf93_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-30_070f8b7639644c0ce5ffe18b95e5cf93_cobalt-strike_glassworm_icedid_luca-stealer_njrat_vidar.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:2072
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\InputTip.ini
- Size 5KB
- SHA256 27d900eea2780555c189b91fda409f6c2ea69e2c8c63a5b1462ffa7fa018d8eb
- MD5 63c9113d169a7917bf6321054ce0c009
- SHA1 3766b8addfb8679cf66165d2f1e1a24f52659219
- SHA512 64b27d49fd81e295bf6e7e0330b8862051eddbde8ae62f9d60464c5548cfe5956c0e6804f091e5716c5aba81463cd9a6ceb0adaa2b6e860d91fa75b055fa4753
- SSDEEP 96:rLe1Fst1EnnRIYP3PPcEQgAEySiQDguKUwxEq0:G8t1EnRWA
- TLSH T16DC1A08329FA1548F6F65F65A9746DB56B39BEE2291CE18C08D14E0E05F1B01C922FE3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\InputTip.ini
- Size 5KB
- SHA256 72b7756a13015b5f3a90c118f3888ce8fc3beeefaf10817cf249e5f936c7df6f
- MD5 04f3f18e7478caf9af67739e23bdf772
- SHA1 77889abfca492889f23292cd37d110d4b2757702
- SHA512 a0ec264f921906e274ec6bf5f90714d5b4080ecd0bb3ee011cf7e2d0c5f1e4dc7be78905b25e4286c731d600f60e8b1db1148765bef156fa153848ab7e0ecb97
- SSDEEP 96:rLe1Fst1EnnRIYP3PPyQgAEySiQDguKUwxEq0:G8t1EnRQ
- TLSH T1FBC1A18329FA1544F6F65F65E9B46DB56B3ABEE2291CE14C08D14E0E05F1B01C922FE3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\InputTip.ini
- Size 5KB
- SHA256 9486fb23033b773351f8460226f0431051265b862decf2b43dc551390f41fecb
- MD5 329b8163bdc72e4c0aa515d2f49d1ade
- SHA1 981ed20ea58fdb7c1b45845e1fe02d76785bcf84
- SHA512 678a1243f5645ff29f2a96fb02bf6e9b5e2f694dd04978fbc26aa1bcb8299e620df54597f7d623419e771f62d5513632682f9ee7b60a9a411c89d89901153ac1
- SSDEEP 96:rLe1Fst1EnnRIYP3PPcEQgAzDguKUwxEq0:G8t1EnRW/
- TLSH T178C1C38329FA1144B6F65E65E9B46DB55B39BEE2291CE14C0CD14E0E05F1B01C923FE3
- MD5 SHA1 SHA512 SSDEEP TLSH