Overview

overview

7

Static

static

3

2026-10-22...ar.exe

windows10-2004-x64

7

2026-10-22...ar.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-10-22_08cd25c8b0a8c179d37a1ad68092bca5_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
  • Size 29.6MB
  • Sample261024-2dhjlsxvbt
  • SHA256 9834eb405b384421f4a8a8649c9567dc0449d1737b5220dc79d0fde35d4098ae
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoverypyinstaller

Malware Config

Targets

    • Target
      2026-10-22_08cd25c8b0a8c179d37a1ad68092bca5_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
    • Size 29.6MB
    • SHA256 9834eb405b384421f4a8a8649c9567dc0449d1737b5220dc79d0fde35d4098ae
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    defense_evasiondiscovery

    • Loads dropped DLL

    • Uses WMI to collect hardware manufacturer information

      Uses WMI to read the system manufacturer, model, baseboard or display adapter, which is often used to detect virtual machines and evade sandboxes.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks