General
- Target 2026-11-13_14a150104e50501f86ff185123edf8b3_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.3MB
- Sample261114-xmt7jsty7m
- SHA256 daa4c407ec38461774561947e452784e8285fad4ad9f83d5e20c9eb0f5a262ac
- MD5 14a150104e50501f86ff185123edf8b3
- SHA1 b476797d54679896e066e59c71b0c264c943be6f
- SHA512 b954806dd62900aac0582afc413f4179e699c5af1dace9e4db051976d0180a8ec5e2b7e0eb4c243096e43126631a0ae600bf9391b2625d5cf31f99d2a7b18854
- SSDEEP 24576:pu8wdRpRF9myI7+h/xjyFPGnDwTayRZZie9EZ7ehiy+oIxoTPIOeniT0UWhyvFOt:pu8OA7+h/xjyFPGnMTayrOZmd+oIyTPv
- TLSH T19655CFA22F970DECEF6D67F780C5DC1686B1BC3D42638D8A4614752F8A33390192B9B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-13_14a150104e50501f86ff185123edf8b3_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-13_14a150104e50501f86ff185123edf8b3_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-13_14a150104e50501f86ff185123edf8b3_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.3MB
- SHA256 daa4c407ec38461774561947e452784e8285fad4ad9f83d5e20c9eb0f5a262ac
- MD5 14a150104e50501f86ff185123edf8b3
- SHA1 b476797d54679896e066e59c71b0c264c943be6f
- SHA512 b954806dd62900aac0582afc413f4179e699c5af1dace9e4db051976d0180a8ec5e2b7e0eb4c243096e43126631a0ae600bf9391b2625d5cf31f99d2a7b18854
- SSDEEP 24576:pu8wdRpRF9myI7+h/xjyFPGnDwTayRZZie9EZ7ehiy+oIxoTPIOeniT0UWhyvFOt:pu8OA7+h/xjyFPGnMTayrOZmd+oIyTPv
- TLSH T19655CFA22F970DECEF6D67F780C5DC1686B1BC3D42638D8A4614752F8A33390192B9B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects DarkSideRAT
Suspicious use of SetThreadContext