General
- Target 2026-10-22_546b4375cfbb41cfe36fa5b4bf7dab4e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 2.2MB
- Sample261024-p92wxafa38
- SHA256 1cc06ed0973ebd407f295995f73d87b3a33b5d676f98fdc17c75e32c12d62bb5
- MD5 546b4375cfbb41cfe36fa5b4bf7dab4e
- SHA1 e888717760a873c3cf8ffc520e59784eab05adae
- SHA512 26a1e1cc4d285d0d6faba6e038d816cb0020593eff42bf254aeffd288822a6aacdbd52344b6952089a3e5f18d67a8236ac9f6a37046ade19e82823e1bf2b3541
- SSDEEP 49152:0PMDEHok06vPBfuwxdjAYE04+C/H3IBygBkT1vy:RUvPBGwU7+C/H3IBygB
- TLSH T1A1B5AE07A6D500F8D27EC174C56A9183D772B42983A8D6EF27E499A50F232D71FFA702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_546b4375cfbb41cfe36fa5b4bf7dab4e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_546b4375cfbb41cfe36fa5b4bf7dab4e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_546b4375cfbb41cfe36fa5b4bf7dab4e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 2.2MB
- SHA256 1cc06ed0973ebd407f295995f73d87b3a33b5d676f98fdc17c75e32c12d62bb5
- MD5 546b4375cfbb41cfe36fa5b4bf7dab4e
- SHA1 e888717760a873c3cf8ffc520e59784eab05adae
- SHA512 26a1e1cc4d285d0d6faba6e038d816cb0020593eff42bf254aeffd288822a6aacdbd52344b6952089a3e5f18d67a8236ac9f6a37046ade19e82823e1bf2b3541
- SSDEEP 49152:0PMDEHok06vPBfuwxdjAYE04+C/H3IBygBkT1vy:RUvPBGwU7+C/H3IBygB
- TLSH T1A1B5AE07A6D500F8D27EC174C56A9183D772B42983A8D6EF27E499A50F232D71FFA702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks whether UAC is enabled