General
- Target 2026-10-22_af2a797560d8709caf9f586bbf65d988_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 2.3MB
- Sample261024-ashz5sdh69
- SHA256 804d9d36fab14bde6441ab7939dace98a1e7bc830cdc777abd2b24bd0685baa4
- MD5 af2a797560d8709caf9f586bbf65d988
- SHA1 b40e5f975be6f7d69c8479805b0c35af691997fb
- SHA512 98e019750e1db25d21e8ac8cad348351d4ff0dea509b4878f6495628571d10f8bf9f9d9cc2f59f31d855f647d38c215542fc62b512f3899396aac62d8bbb7d56
- SSDEEP 49152:SLki7ylkDzeD6BeFWGpEpRZofT/2GVjWvcwAEP0:WeD60REofT/2GVjWv
- TLSH T1AAB5A00766E900F8C37EC578C52A8543E772B429C3A4D6EF27E855950F236DB1BB6B02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_af2a797560d8709caf9f586bbf65d988_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_af2a797560d8709caf9f586bbf65d988_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_af2a797560d8709caf9f586bbf65d988_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 2.3MB
- SHA256 804d9d36fab14bde6441ab7939dace98a1e7bc830cdc777abd2b24bd0685baa4
- MD5 af2a797560d8709caf9f586bbf65d988
- SHA1 b40e5f975be6f7d69c8479805b0c35af691997fb
- SHA512 98e019750e1db25d21e8ac8cad348351d4ff0dea509b4878f6495628571d10f8bf9f9d9cc2f59f31d855f647d38c215542fc62b512f3899396aac62d8bbb7d56
- SSDEEP 49152:SLki7ylkDzeD6BeFWGpEpRZofT/2GVjWvcwAEP0:WeD60REofT/2GVjWv
- TLSH T1AAB5A00766E900F8C37EC578C52A8543E772B429C3A4D6EF27E855950F236DB1BB6B02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Checks whether UAC is enabled