General
- Target 2026-10-28_1b6731de51dcd19d2f158e3da8b5cf72_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 1.4MB
- Sample261028-a86fdahy4m
- SHA256 75371a0ac74b3003d8b68e19f09614cf0036cad0dbf5c1a4e4c0079c0dd0d4bc
- MD5 1b6731de51dcd19d2f158e3da8b5cf72
- SHA1 bd62aefe33324f1a4ad8e80b7c1f63fd543dc857
- SHA512 ae1b5105626f0d6749f94b42d67f708ad39c5371ab1d40672203ebf96ea55349e8b45cfd95897bac25e02945dde52e8ffc40ab9c93e4898b1a1ac49c14805101
- SSDEEP 24576:rEHLKQjKaxHADmYBaKngL2jdshRTdG1YxITqvfPkbIcbjL:rsntUmCarSj8RoTCC
- TLSH T1F265BE64EB0509BCEAF1B638DBDE526593A13D55033744CF13D03F8A3A37A92AE7A111
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-28_1b6731de51dcd19d2f158e3da8b5cf72_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_1b6731de51dcd19d2f158e3da8b5cf72_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_1b6731de51dcd19d2f158e3da8b5cf72_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 1.4MB
- SHA256 75371a0ac74b3003d8b68e19f09614cf0036cad0dbf5c1a4e4c0079c0dd0d4bc
- MD5 1b6731de51dcd19d2f158e3da8b5cf72
- SHA1 bd62aefe33324f1a4ad8e80b7c1f63fd543dc857
- SHA512 ae1b5105626f0d6749f94b42d67f708ad39c5371ab1d40672203ebf96ea55349e8b45cfd95897bac25e02945dde52e8ffc40ab9c93e4898b1a1ac49c14805101
- SSDEEP 24576:rEHLKQjKaxHADmYBaKngL2jdshRTdG1YxITqvfPkbIcbjL:rsntUmCarSj8RoTCC
- TLSH T1F265BE64EB0509BCEAF1B638DBDE526593A13D55033744CF13D03F8A3A37A92AE7A111
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext