General
- Target 2026-05-03_eb6e19b874224389eab56c874e4c5b3c_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar_zxxz
- Size 60.2MB
- Sample260503-prxt8shv3s
- SHA256 666d8966a466a389648078440ea7afb96e23b48df1636cae92a4551823649701
- MD5 eb6e19b874224389eab56c874e4c5b3c
- SHA1 a3cb8e4aa4188a9173a58ec05997cc44554511c7
- SHA512 c68613546cc1945275d80647a5629014ecdbe8c2d3f3ba0dad74566c86b4f62fed9872fac3d9684b7064ed0b68ed715b08ea90124966e3842122c7837bf39819
- SSDEEP 393216:msqGxqsktO5GG02US1P+/U7q7K0mAb5ZUjcDUND3usyBvaRRMV+o33irYVI31BLF:m4lmOIUMFCrYVKAGmjvw
- TLSH T18ED7494666EA0485FDF7EA3489F65513C633BC166F3185CF220C1B2A1F776E08A76722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-03_eb6e19b874224389eab56c874e4c5b3c_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar_zxxz.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-03_eb6e19b874224389eab56c874e4c5b3c_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar_zxxz.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-03_eb6e19b874224389eab56c874e4c5b3c_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar_zxxz
- Size 60.2MB
- SHA256 666d8966a466a389648078440ea7afb96e23b48df1636cae92a4551823649701
- MD5 eb6e19b874224389eab56c874e4c5b3c
- SHA1 a3cb8e4aa4188a9173a58ec05997cc44554511c7
- SHA512 c68613546cc1945275d80647a5629014ecdbe8c2d3f3ba0dad74566c86b4f62fed9872fac3d9684b7064ed0b68ed715b08ea90124966e3842122c7837bf39819
- SSDEEP 393216:msqGxqsktO5GG02US1P+/U7q7K0mAb5ZUjcDUND3usyBvaRRMV+o33irYVI31BLF:m4lmOIUMFCrYVKAGmjvw
- TLSH T18ED7494666EA0485FDF7EA3489F65513C633BC166F3185CF220C1B2A1F776E08A76722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Command and Scripting Interpreter: PowerShell
Run Powershell to get system information as a root user.
Enumerates processes with tasklist