General
- Target 2026-11-01_8f77600f4fc672d00d5c5daa98b76e57_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 15.8MB
- Sample261102-sd8alac14p
- SHA256 73a03bc2bd18328a689ab839e363d1626487d4b34cf9ef40ff20282ced0aaf39
- MD5 8f77600f4fc672d00d5c5daa98b76e57
- SHA1 4072b280ee64d5e8123e5398f447bd8c83ec5c3b
- SHA512 45c928b15ac06dbfa2cad4a8fd302555004226ea94a55623173174675a2248e97eda162de89133f9683260a514a52e38f1448edfda7203f7e20a93fe8c77c875
- SSDEEP 393216:19a9OM3kCVfH/5BNeNloV/SSawxhJkoP0m6DI:za9OSkCVH/fNeNlZN2iDI
- TLSH T12EF62203F65281ECC55EC478C712C772B732BC890F25A2EB27D46A542E2BBE01E6D795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-11-01_8f77600f4fc672d00d5c5daa98b76e57_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_8f77600f4fc672d00d5c5daa98b76e57_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_8f77600f4fc672d00d5c5daa98b76e57_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 15.8MB
- SHA256 73a03bc2bd18328a689ab839e363d1626487d4b34cf9ef40ff20282ced0aaf39
- MD5 8f77600f4fc672d00d5c5daa98b76e57
- SHA1 4072b280ee64d5e8123e5398f447bd8c83ec5c3b
- SHA512 45c928b15ac06dbfa2cad4a8fd302555004226ea94a55623173174675a2248e97eda162de89133f9683260a514a52e38f1448edfda7203f7e20a93fe8c77c875
- SSDEEP 393216:19a9OM3kCVfH/5BNeNloV/SSawxhJkoP0m6DI:za9OSkCVH/fNeNlZN2iDI
- TLSH T12EF62203F65281ECC55EC478C712C772B732BC890F25A2EB27D46A542E2BBE01E6D795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing many IR and analysis tools
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1