General

  • Target
    2026-11-07_ca6f8634171636fef66eb9e092b0a95e_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
  • Size 3.7MB
  • Sample261107-l742psw15j
  • SHA256 e4deadda6f78e6aa85b2e0a359f87fcb5b975c839458657109051ce2d3799519
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-11-07_ca6f8634171636fef66eb9e092b0a95e_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
    .exe 3.7MB

2026-11-07_ca6f8634171636fef66eb9e092b0a95e_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar

  • IMPHASH 1fd4164977c1848e536edf72a9b52d01
  • SHA256 e4deadda6f78e6aa85b2e0a359f87fcb5b975c839458657109051ce2d3799519
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
20:bc:2a:01:10:97:63:8a:3b:a7:38:61:6e:d7:c3:ae:20:0a:2e:d8:d1:5b:91:45:db:22:37:be:4a:1e:ee:a8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
Minor OS version
0
Major OS version
10
Entry point
2398312
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\buildworker\csgo_rel_win64\build\_build_\utils\resourceinfo\_vpc_resourceinfo\default\win64\_msvc_\Retail\resourceinfo.pdb