General
- Target 2026-05-08_7d2cd93f9b2448d6bf9385a029c5b9b8_cobalt-strike_coinminer_cryptbot_glassworm_icedid_luca-stealer_njrat_poet-rat_satacom_stealc
- Size 43.0MB
- Sample260509-bcsebacv2l
- SHA256 5aa9d282e6d47b9bbbd5aae9d7bfdc26b9aa95a4388ef8a36d50e2a72a73a7db
- MD5 7d2cd93f9b2448d6bf9385a029c5b9b8
- SHA1 229c32d1f9c951710c83d081b229ac7f5d316958
- SHA512 b75a4dd077f9e8c8e8c49188123a0d2cd0d8a7ca82291423880511c1b2f0369ce6a0ee0621678cf05c9d1038853c3d14d28d12931b38bb4fce8e02ff8c235429
- SSDEEP 98304:5kmDrLgoT0FLUUxlyleOTotlJwi/fh6ImzzJoDfuBcMv+A73XAk:5XLd+LxydTotlJwiHh6ImzD+Fk
- TLSH T10BA7BE42FAEB40F8D543C6704967962FE731B4084336DBD7CB909E56EE17AE11E3A212
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-05-08_7d2cd93f9b2448d6bf9385a029c5b9b8_cobalt-strike_coinminer_cryptbot_glassworm_icedid_luca-s.exe
Resource
win10v2004-20250619-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-08_7d2cd93f9b2448d6bf9385a029c5b9b8_cobalt-strike_coinminer_cryptbot_glassworm_icedid_luca-s.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-08_7d2cd93f9b2448d6bf9385a029c5b9b8_cobalt-strike_coinminer_cryptbot_glassworm_icedid_luca-stealer_njrat_poet-rat_satacom_stealc
- Size 43.0MB
- SHA256 5aa9d282e6d47b9bbbd5aae9d7bfdc26b9aa95a4388ef8a36d50e2a72a73a7db
- MD5 7d2cd93f9b2448d6bf9385a029c5b9b8
- SHA1 229c32d1f9c951710c83d081b229ac7f5d316958
- SHA512 b75a4dd077f9e8c8e8c49188123a0d2cd0d8a7ca82291423880511c1b2f0369ce6a0ee0621678cf05c9d1038853c3d14d28d12931b38bb4fce8e02ff8c235429
- SSDEEP 98304:5kmDrLgoT0FLUUxlyleOTotlJwi/fh6ImzzJoDfuBcMv+A73XAk:5XLd+LxydTotlJwiHh6ImzD+Fk
- TLSH T10BA7BE42FAEB40F8D543C6704967962FE731B4084336DBD7CB909E56EE17AE11E3A212
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE