General
- Target 2026-10-26_8db749a3ea8c13a082984ec871053ad4_cobalt-strike_glassworm_icedid_njrat_remcos_vidar
- Size 6.6MB
- Sample261027-pavcsa1v6q
- SHA256 31334359eec5aeb54a77b1bf4ec6cd47374ab3edd44cd80b66faca114276404f
- MD5 8db749a3ea8c13a082984ec871053ad4
- SHA1 7105f028832d4ac83616709feb84b5c13f2ee4eb
- SHA512 d4b899accdbe7001241307f0d7987e134b3ffd645283d4ff3391b1f36dd15c2947c22940ee569e606aa21a9292899a02a905bdb92e90b7a2f630197cd2f11023
- SSDEEP 196608:y9J9UdZucbL86nlUtirG5P6G+KV5zsmto5UJ+sRUU0:s8pG+KEqD
- TLSH T1BC666B863665C1AAD027903CC64696FAE6713C44CF50D7CB2AA07F6D3F33AD449BB621
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_8db749a3ea8c13a082984ec871053ad4_cobalt-strike_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_8db749a3ea8c13a082984ec871053ad4_cobalt-strike_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_8db749a3ea8c13a082984ec871053ad4_cobalt-strike_glassworm_icedid_njrat_remcos_vidar
- Size 6.6MB
- SHA256 31334359eec5aeb54a77b1bf4ec6cd47374ab3edd44cd80b66faca114276404f
- MD5 8db749a3ea8c13a082984ec871053ad4
- SHA1 7105f028832d4ac83616709feb84b5c13f2ee4eb
- SHA512 d4b899accdbe7001241307f0d7987e134b3ffd645283d4ff3391b1f36dd15c2947c22940ee569e606aa21a9292899a02a905bdb92e90b7a2f630197cd2f11023
- SSDEEP 196608:y9J9UdZucbL86nlUtirG5P6G+KV5zsmto5UJ+sRUU0:s8pG+KEqD
- TLSH T1BC666B863665C1AAD027903CC64696FAE6713C44CF50D7CB2AA07F6D3F33AD449BB621
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext