General
- Target 2026-05-10_be21652b6e9a0c631e41390fc6297bc0_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_xmrig
- Size 6.0MB
- Sample260510-s2vdmsbs41
- SHA256 b43a6927416ab67967e9dc316574cfa1d790e789c2d6bcf333617d80ce20e115
- MD5 be21652b6e9a0c631e41390fc6297bc0
- SHA1 fe047875b61b992276da7d26970e7ae4e0d88bc5
- SHA512 b922797ca5e22c4fa69d6fc14685efaaaa466bb1017395c477237e577bdcabb343a7c38eadbd2c59ed80b3a03d9633aa05e58abe2ce02ddfa61dc4caddb235f8
- SSDEEP 98304:jvHIxhveuC3AjSwjpFaUjorjGFaWlvLtMQXfPS6xhel1kDlLpDfHfp+7+TYZyici:jv4dSBl1khLpDPs78gc
- TLSH T18D569D66B6A400E8C87BC17CCA475913E7B2B8165370A7DF16A45B7A1F33AD41E3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-10_be21652b6e9a0c631e41390fc6297bc0_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_xmrig.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-10_be21652b6e9a0c631e41390fc6297bc0_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_xmrig.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-10_be21652b6e9a0c631e41390fc6297bc0_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_xmrig
- Size 6.0MB
- SHA256 b43a6927416ab67967e9dc316574cfa1d790e789c2d6bcf333617d80ce20e115
- MD5 be21652b6e9a0c631e41390fc6297bc0
- SHA1 fe047875b61b992276da7d26970e7ae4e0d88bc5
- SHA512 b922797ca5e22c4fa69d6fc14685efaaaa466bb1017395c477237e577bdcabb343a7c38eadbd2c59ed80b3a03d9633aa05e58abe2ce02ddfa61dc4caddb235f8
- SSDEEP 98304:jvHIxhveuC3AjSwjpFaUjorjGFaWlvLtMQXfPS6xhel1kDlLpDfHfp+7+TYZyici:jv4dSBl1khLpDPs78gc
- TLSH T18D569D66B6A400E8C87BC17CCA475913E7B2B8165370A7DF16A45B7A1F33AD41E3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
XMRig Miner payload
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.