General
- Target 2026-10-01_20fbec0f2ad01094681dad75ecd5472d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 12.6MB
- Sample261002-w6caeaverg
- SHA256 c510cfdaf48526bbc078389f7f81f742dee233ed6422857a382a8a1cca8485c7
- MD5 20fbec0f2ad01094681dad75ecd5472d
- SHA1 49b896e36393f1c658e04da58ed1ee676e783ac4
- SHA512 da92568be3a28d6f96d7c0991cfdd67ee8f0ba5361578535ae0cc98adb2688ecff2ed417353f448f926bb52fbc1eade68f2bd15a98a58e9ff9bdaeb15a0ef24e
- SSDEEP 196608:5DWbLSYIYNj3XJy2KfMQC9cIurMU2/Y4YVcrhmv:5D+LSYIYNj3XJy2KfMQvrC3YVUmv
- TLSH T104D62A157B5B95A8C0ABC07482878A675D7030CB0B35BAFF558496392F7ABF46F38318
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_20fbec0f2ad01094681dad75ecd5472d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_20fbec0f2ad01094681dad75ecd5472d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_20fbec0f2ad01094681dad75ecd5472d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 12.6MB
- SHA256 c510cfdaf48526bbc078389f7f81f742dee233ed6422857a382a8a1cca8485c7
- MD5 20fbec0f2ad01094681dad75ecd5472d
- SHA1 49b896e36393f1c658e04da58ed1ee676e783ac4
- SHA512 da92568be3a28d6f96d7c0991cfdd67ee8f0ba5361578535ae0cc98adb2688ecff2ed417353f448f926bb52fbc1eade68f2bd15a98a58e9ff9bdaeb15a0ef24e
- SSDEEP 196608:5DWbLSYIYNj3XJy2KfMQC9cIurMU2/Y4YVcrhmv:5D+LSYIYNj3XJy2KfMQvrC3YVUmv
- TLSH T104D62A157B5B95A8C0ABC07482878A675D7030CB0B35BAFF558496392F7ABF46F38318
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.