General
- Target 2026-10-10_696cce8f476853b7f2814b286c645329_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 16.5MB
- Sample261011-pc65cshe82
- SHA256 e7fd15cf03803f6abe5114062d5f042270a450400fe3be058e87101a2eacf3f9
- MD5 696cce8f476853b7f2814b286c645329
- SHA1 4104c4054a975976c2798b8d4fbc7c80fabbaea2
- SHA512 48979e06640122bc8db57909ab239ec1af685ebce68b2f4fda1bc8d1fcd4cc191b48c844a3e3e55a8dd4829c7a70624655958bda79ee27fb00fabad9e43c808b
- SSDEEP 393216:/owJDRKUXsYZO8Rv3pQaycQqhqCmwq/SHgHxlMoDch:/owJcUXs9ABFycQsqtwVu
- TLSH T19707232BA7A800BCE1FBE278CE574943D2767809037196EF17C14D562E5B7E09E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-10_696cce8f476853b7f2814b286c645329_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-10_696cce8f476853b7f2814b286c645329_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_696cce8f476853b7f2814b286c645329_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 16.5MB
- SHA256 e7fd15cf03803f6abe5114062d5f042270a450400fe3be058e87101a2eacf3f9
- MD5 696cce8f476853b7f2814b286c645329
- SHA1 4104c4054a975976c2798b8d4fbc7c80fabbaea2
- SHA512 48979e06640122bc8db57909ab239ec1af685ebce68b2f4fda1bc8d1fcd4cc191b48c844a3e3e55a8dd4829c7a70624655958bda79ee27fb00fabad9e43c808b
- SSDEEP 393216:/owJDRKUXsYZO8Rv3pQaycQqhqCmwq/SHgHxlMoDch:/owJcUXs9ABFycQsqtwVu
- TLSH T19707232BA7A800BCE1FBE278CE574943D2767809037196EF17C14D562E5B7E09E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.