General
- Target 2026-10-23_29e33dabfcbb858914abb83e2a08e74c_cobalt-strike_frostygoop_glassworm_hive_icedid_luca-stealer_njrat_poet-rat_salatstealer_sliver_snatch_vidar
- Size 8.1MB
- Sample261023-rdh52ab15v
- SHA256 745eaaea03fa6e68897d35562b8d48a9cdc61752e9925f6e3f451dc74c4d72eb
- MD5 29e33dabfcbb858914abb83e2a08e74c
- SHA1 03dce534fd207b68ac0c9b08555afccb8e16c4db
- SHA512 aa2870be6e86a28e1d3af1bd961973d9dffedf030632b44269d3bf52f16b1b8469518af11a5d732793e448777a79f19b96d83b28e4c0ccce6feec9737ee06742
- SSDEEP 49152:YYnO523C+Krb/TOvO90dL3BmAFd4A64nsfJ7VpFqSB1g1+a256+rZmCeO0XdSXqt:YYj3Wcy5/xXU3lClGB/NYcTpOG7ZE78Z
- TLSH T10C86E5C2AC404B95CC6983FEC9E5627226B07C5C07A193F73730F6A82A766EC4A75F54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-23_29e33dabfcbb858914abb83e2a08e74c_cobalt-strike_frostygoop_glassworm_hive_icedid_luca-stea.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-23_29e33dabfcbb858914abb83e2a08e74c_cobalt-strike_frostygoop_glassworm_hive_icedid_luca-stea.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-23_29e33dabfcbb858914abb83e2a08e74c_cobalt-strike_frostygoop_glassworm_hive_icedid_luca-stealer_njrat_poet-rat_salatstealer_sliver_snatch_vidar
- Size 8.1MB
- SHA256 745eaaea03fa6e68897d35562b8d48a9cdc61752e9925f6e3f451dc74c4d72eb
- MD5 29e33dabfcbb858914abb83e2a08e74c
- SHA1 03dce534fd207b68ac0c9b08555afccb8e16c4db
- SHA512 aa2870be6e86a28e1d3af1bd961973d9dffedf030632b44269d3bf52f16b1b8469518af11a5d732793e448777a79f19b96d83b28e4c0ccce6feec9737ee06742
- SSDEEP 49152:YYnO523C+Krb/TOvO90dL3BmAFd4A64nsfJ7VpFqSB1g1+a256+rZmCeO0XdSXqt:YYj3Wcy5/xXU3lClGB/NYcTpOG7ZE78Z
- TLSH T10C86E5C2AC404B95CC6983FEC9E5627226B07C5C07A193F73730F6A82A766EC4A75F54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.