General
- Target 2026-04-15_89919c2bee76548faff20e78bb293446_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_vidar
- Size 8.6MB
- Sample260415-nededscw3j
- SHA256 71bfad3d017f9f7db8329d2f2d73459f964d6fc99841fe38c6d0efc0d32368bd
- MD5 89919c2bee76548faff20e78bb293446
- SHA1 ed213a828577c406d32835b62da366b76f912a1b
- SHA512 a0be7ffd5516861d9695ed258b2f10262a76dbf80209fad72384a6bc3fe52d24faae48fde2686c2f3ce73bc532001ba3cd2ddadaacd9d3e303eeefbcd0b7689f
- SSDEEP 196608:5QsRGUgMeotJy7L1/UNLNB9z0Ku88TwlZ9:5jRGMeIJyPxmLNzu8v
- TLSH T15496DF92B3E4F0A4DEFED1798A96611FE6F2B4252330FBDF014186650F27AD0563A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-15_89919c2bee76548faff20e78bb293446_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_89919c2bee76548faff20e78bb293446_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win11-20260130-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_89919c2bee76548faff20e78bb293446_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_vidar
- Size 8.6MB
- SHA256 71bfad3d017f9f7db8329d2f2d73459f964d6fc99841fe38c6d0efc0d32368bd
- MD5 89919c2bee76548faff20e78bb293446
- SHA1 ed213a828577c406d32835b62da366b76f912a1b
- SHA512 a0be7ffd5516861d9695ed258b2f10262a76dbf80209fad72384a6bc3fe52d24faae48fde2686c2f3ce73bc532001ba3cd2ddadaacd9d3e303eeefbcd0b7689f
- SSDEEP 196608:5QsRGUgMeotJy7L1/UNLNB9z0Ku88TwlZ9:5jRGMeIJyPxmLNzu8v
- TLSH T15496DF92B3E4F0A4DEFED1798A96611FE6F2B4252330FBDF014186650F27AD0563A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables packed with VMProtect.
Suspicious use of NtSetInformationThreadHideFromDebugger