General
- Target 2026-11-01_c3c0046b9b37af13e3d92a3a55c3ba7e_cobalt-strike_glassworm_hijackloader_icedid_njrat_satacom_vidar
- Size 35.5MB
- Sample261102-lchj8astbs
- SHA256 c6d930895028a26fe6f90f2dffa831c889b1ddc7bd3775b9a01f3b33910067aa
- MD5 c3c0046b9b37af13e3d92a3a55c3ba7e
- SHA1 b9247f7b35b900f72cb883cb2efebf53c28e4c09
- SHA512 e07a87b9ac68bb4d4b9ca4399ff6c6111509f84f648657b9af31cefc3e4293018a1da2a2b42c3b958a4189f5b75308045aad46964e1c5bb34326164ac137dc27
- SSDEEP 393216:0VkvmQSC2RmGS6J5LHrTgfQEkWnsZGKvWd8LQrZpeJsv6tWKFdu9CiNKEdJ9Ni+g:0gfQEK6vrZpjgEdJriTHpMigc1b
- TLSH T16B87584672E00594C066C47CA956C1F2E7B23DC55B2156DB31E8BE9BBF376E82D3A320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-11-01_c3c0046b9b37af13e3d92a3a55c3ba7e_cobalt-strike_glassworm_hijackloader_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_c3c0046b9b37af13e3d92a3a55c3ba7e_cobalt-strike_glassworm_hijackloader_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_c3c0046b9b37af13e3d92a3a55c3ba7e_cobalt-strike_glassworm_hijackloader_icedid_njrat_satacom_vidar
- Size 35.5MB
- SHA256 c6d930895028a26fe6f90f2dffa831c889b1ddc7bd3775b9a01f3b33910067aa
- MD5 c3c0046b9b37af13e3d92a3a55c3ba7e
- SHA1 b9247f7b35b900f72cb883cb2efebf53c28e4c09
- SHA512 e07a87b9ac68bb4d4b9ca4399ff6c6111509f84f648657b9af31cefc3e4293018a1da2a2b42c3b958a4189f5b75308045aad46964e1c5bb34326164ac137dc27
- SSDEEP 393216:0VkvmQSC2RmGS6J5LHrTgfQEkWnsZGKvWd8LQrZpeJsv6tWKFdu9CiNKEdJ9Ni+g:0gfQEK6vrZpjgEdJriTHpMigc1b
- TLSH T16B87584672E00594C066C47CA956C1F2E7B23DC55B2156DB31E8BE9BBF376E82D3A320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.