General
- Target 2026-11-09_90f65c98ea7ab99af80323560908b8f9_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 16.0MB
- Sample261110-pyg3csay9x
- SHA256 0097149eef5bcaa101e75fe1a37fb040f9edc8cc1fcb1c24502b896e5862bada
- MD5 90f65c98ea7ab99af80323560908b8f9
- SHA1 b5b096a1c8c1fe09a56010fc7a884bb633ff5d80
- SHA512 204c1433d9d805ca0b4f28b68dae3183762d076fa0ddda986c071b1e5dca6d84eaac3bef4abce30dc30b1e40b4c8d056c359e45852e7ac8a9e1deef14d4f73b9
- SSDEEP 393216:rcM0Y6zdZ11a8W1+TtIiFY0V8/3c1tEF6gjv2CqLImjIlq:j6Pa8W1QtIk0c1t6bvoLIUIlq
- TLSH T161073354A3620CDBE1EF143A85B2CF35FAF7B84A4761C2CF57EC16851A532C54E3AA12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-09_90f65c98ea7ab99af80323560908b8f9_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_90f65c98ea7ab99af80323560908b8f9_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-09_90f65c98ea7ab99af80323560908b8f9_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 16.0MB
- SHA256 0097149eef5bcaa101e75fe1a37fb040f9edc8cc1fcb1c24502b896e5862bada
- MD5 90f65c98ea7ab99af80323560908b8f9
- SHA1 b5b096a1c8c1fe09a56010fc7a884bb633ff5d80
- SHA512 204c1433d9d805ca0b4f28b68dae3183762d076fa0ddda986c071b1e5dca6d84eaac3bef4abce30dc30b1e40b4c8d056c359e45852e7ac8a9e1deef14d4f73b9
- SSDEEP 393216:rcM0Y6zdZ11a8W1+TtIiFY0V8/3c1tEF6gjv2CqLImjIlq:j6Pa8W1QtIk0c1t6bvoLIUIlq
- TLSH T161073354A3620CDBE1EF143A85B2CF35FAF7B84A4761C2CF57EC16851A532C54E3AA12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.