General
- Target 2026-05-17_2c557886be2bdd9e0ea1cc5b7719086a_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 3.6MB
- Sample260517-nbbfmafv2x
- SHA256 11a564ca8be5598d5fec110a8f6b86d91b5ba46fafcf01808ef18aac7b3ddb69
- MD5 2c557886be2bdd9e0ea1cc5b7719086a
- SHA1 e73f3c430889eea99525648daeaa59a4bf7d83f6
- SHA512 d427d3c6980bf2c7c45f6d3200ea5049e214e2649e22e76e823c540bb702752191c77a134fa65c2926f12548b1d294e80fb2037f18daba543f1ae7af0f74d32f
- SSDEEP 98304:LD6jkMMVVECYBYtpiqvEP5t58ZPgMlIjtY:oGpiaQ5t5Y4Mi5Y
- TLSH T1B8068D56A3A800E5C9B7C03CC91B8607E7F1B86963749BDF12A4567A1F23BD15E3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-17_2c557886be2bdd9e0ea1cc5b7719086a_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-17_2c557886be2bdd9e0ea1cc5b7719086a_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 3.6MB
- SHA256 11a564ca8be5598d5fec110a8f6b86d91b5ba46fafcf01808ef18aac7b3ddb69
- MD5 2c557886be2bdd9e0ea1cc5b7719086a
- SHA1 e73f3c430889eea99525648daeaa59a4bf7d83f6
- SHA512 d427d3c6980bf2c7c45f6d3200ea5049e214e2649e22e76e823c540bb702752191c77a134fa65c2926f12548b1d294e80fb2037f18daba543f1ae7af0f74d32f
- SSDEEP 98304:LD6jkMMVVECYBYtpiqvEP5t58ZPgMlIjtY:oGpiaQ5t5Y4Mi5Y
- TLSH T1B8068D56A3A800E5C9B7C03CC91B8607E7F1B86963749BDF12A4567A1F23BD15E3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables referencing many IR and analysis tools
-
XMRig Miner payload