2026-10-16_748ce4dc4c0cd169f2485960ef718663_cobalt-strike_glassworm_icedid_njrat_satacom_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-16_748ce4dc4c0cd169f2485960ef718663_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
Size 8.6MB
Sample261017-rx2fqagv6p
SHA256 a29b1c108d96e02767a5ee6fa37cbd41cab8f2e7cf6b525f29eed294931785bf
MD5 748ce4dc4c0cd169f2485960ef718663
SHA1 87d4f0f876bb9f116b4ae6b181c0ef9e70a4fcfd
SHA512 2b98b16ef08f375bca7053de615d760cd293ccf3fb0de674fc439fe95706a5692525fd4d940d596b3a9102d936ab4a92e175f9bee8915869f71dd6361aeecfb1
SSDEEP 98304:+R+X7dmOkuP6Rwzdm3rNL8BtuBXaEWTQ83j/Rvl1:+R+XfBP6q0aBKaE+7z/Rvl1
TLSH
T16396BF17F7859269D02AC17CC2D78B26E632B4451B22A2CF1244573D2E77BF82F3A794
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-16_748ce4dc4c0cd169f2485960ef718663_cobalt-strike_glassworm_icedid_njrat_satacom_stealc

File Explorer

2026-10-16_748ce4dc4c0cd169f2485960ef718663_cobalt-strike_glassworm_icedid_njrat_satacom_stealc

.exe 8.6MB

2026-10-16_748ce4dc4c0cd169f2485960ef718663_cobalt-strike_glassworm_icedid_njrat_satacom_stealc

IMPHASH 4a06d88e19538dd5c4cb1f4e59b574d3
SHA256 a29b1c108d96e02767a5ee6fa37cbd41cab8f2e7cf6b525f29eed294931785bf
MD5 748ce4dc4c0cd169f2485960ef718663
SHA1 87d4f0f876bb9f116b4ae6b181c0ef9e70a4fcfd
SHA512 2b98b16ef08f375bca7053de615d760cd293ccf3fb0de674fc439fe95706a5692525fd4d940d596b3a9102d936ab4a92e175f9bee8915869f71dd6361aeecfb1
SSDEEP 98304:+R+X7dmOkuP6Rwzdm3rNL8BtuBXaEWTQ83j/Rvl1:+R+XfBP6q0aBKaE+7z/Rvl1
TLSH
T16396BF17F7859269D02AC17CC2D78B26E632B4451B22A2CF1244573D2E77BF82F3A794
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

461488

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\epala\Downloads\random\random\random\random\x64\Release\random.pdb

kernel32

OutputDebugStringA GetTempPathW GetEnvironmentVariableA GetVolumeInformationA GetCurrentThreadId OpenProcess CreateToolhelp32Snapshot GetExitCodeThread Sleep K32GetModuleFileNameExA CopyFileA GetLastError GetFileAttributesA Process32NextW MoveFileExA CreateFileA GetCurrentThread DeleteFileA Process32FirstW CloseHandle GetCurrentProcess VirtualAllocEx ExitProcess ReadProcessMemory GetModuleHandleW CreateRemoteThread CreateProcessA K32EnumProcessModules CreateDirectoryA VirtualFreeEx SetThreadContext GetTickCount OpenThread AcquireSRWLockExclusive SleepConditionVariableSRW SetUnhandledExceptionFilter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead GetProcAddress QueryPerformanceFrequency WriteFile WriteProcessMemory GetModuleFileNameA QueryPerformanceCounter GetThreadContext LoadLibraryA WakeAllConditionVariable GetLocaleInfoA GlobalUnlock WideCharToMultiByte GlobalLock GlobalFree FreeLibrary GlobalAlloc AddVectoredExceptionHandler MultiByteToWideChar ReleaseSRWLockExclusive

user32

GetWindowLongPtrW UnregisterClassW CreateWindowExW SetWindowLongPtrW SetWindowPos DestroyWindow GetWindowRect DefWindowProcW UpdateWindow RegisterClassExW GetMessageExtraInfo ScreenToClient GetCapture ClientToScreen GetWindowTextA GetKeyboardLayout GetForegroundWindow SetCapture ShowWindow DispatchMessageW GetKeyState SetCursor GetClientRect IsWindowUnicode ReleaseCapture SetCursorPos GetCursorPos OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData MessageBoxA PeekMessageW EnumWindows TranslateMessage PostQuitMessage GetDesktopWindow TrackMouseEvent GetClassInfoExW LoadCursorW

comdlg32

GetOpenFileNameA

advapi32

RegQueryValueExA RegCloseKey RegGetValueA RegOpenKeyExA

shell32

ShellExecuteW ShellExecuteA

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

d3dcompiler_47

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea DwmSetWindowAttribute

wininet

HttpOpenRequestA InternetOpenUrlA InternetSetOptionA HttpQueryInfoA InternetOpenA InternetCloseHandle HttpSendRequestA InternetConnectA HttpAddRequestHeadersA InternetReadFile

msvcp140

_Cnd_do_broadcast_at_thread_exit _Thrd_id _Thrd_join ?_Xlength_error@std@@YAXPEBD@Z ?_Throw_Cpp_error@std@@YAXH@Z ?_Xout_of_range@std@@YAXPEBD@Z

d3d11

D3D11CreateDeviceAndSwapChain

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset memmove memcpy memcmp memchr _CxxThrowException __C_specific_handler __current_exception_context strchr __current_exception __std_terminate strstr __std_exception_destroy __std_exception_copy

api-ms-win-crt-stdio-l1-1-0

ftell feof ungetc __stdio_common_vfprintf __stdio_common_vsprintf fread __stdio_common_vsscanf fputs _wfopen _set_fmode fopen_s ferror _wfopen_s fgetc fseek fclose __p__commode __stdio_common_vsprintf_s fputc fflush __acrt_iob_func fwrite

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

malloc _callnewh _set_new_mode free realloc

api-ms-win-crt-convert-l1-1-0

strtol _strtoi64

api-ms-win-crt-string-l1-1-0

strncpy strcpy_s wcslen _wcsnicmp strncmp strlen _stricmp strcmp _wcsicmp tolower isalnum

api-ms-win-crt-time-l1-1-0

_time64 _localtime64_s strftime

api-ms-win-crt-filesystem-l1-1-0

remove

api-ms-win-crt-runtime-l1-1-0

_beginthreadex _register_thread_local_exe_atexit_callback terminate _c_exit __p___argv __p___argc _exit exit _initterm_e _initterm _get_initial_narrow_environment _set_app_type _seh_filter_exe _crt_atexit _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _cexit

api-ms-win-crt-math-l1-1-0

ceilf __setusermatherr sinf powf cosf acosf sqrtf expf ldexp fmodf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-16_748ce4dc4c0cd169f2485960ef718663_cobalt-strike_glassworm_icedid_njrat_satacom_stealc

kernel32

user32

comdlg32

advapi32

shell32

imm32

d3dcompiler_47

dwmapi

wininet

msvcp140

d3d11

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic