General
- Target 2026-05-26_31240916c4075e0cb7fece16bedcd0ae_cobalt-strike_coinminer_glassworm_hijackloader_icedid_krakenkeylogger_njrat_olympic-destroyer_poet-rat_quasar-rat_satacom_vidar
- Size 74.0MB
- Sample260526-vb1tvahs91
- SHA256 2774285284f2f28dee36c22249da779e2d17d4a6a29ec284e8d8b060388e542c
- MD5 31240916c4075e0cb7fece16bedcd0ae
- SHA1 de2a5c34746837bb94d2e651570077e7d077315d
- SHA512 31b1eb4ac0d332e512ac53ea98134fac0a6cce370cc32fa3048ecb30a81b133d6640116d1644fc3b66dc4a4f69a2841abffbc3b97297325dfe7c1a56d1940f67
- SSDEEP 393216:4/ic+58Z90av1IE/0ZlFwMDdJvhSDELtRhpolsVWd5JbnFZeMNQNt/ZCFLy/npHw:puv+YURBVWd51hNQNt/ZYLy/pj8TTgq
- TLSH T18C08AD15E3E84616E52FC2BDC6638413D2B1BC971322D6CF0454F6992F73BD2AB36262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-26_31240916c4075e0cb7fece16bedcd0ae_cobalt-strike_coinminer_glassworm_hijackloader_icedid_kr.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-26_31240916c4075e0cb7fece16bedcd0ae_cobalt-strike_coinminer_glassworm_hijackloader_icedid_kr.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-26_31240916c4075e0cb7fece16bedcd0ae_cobalt-strike_coinminer_glassworm_hijackloader_icedid_krakenkeylogger_njrat_olympic-destroyer_poet-rat_quasar-rat_satacom_vidar
- Size 74.0MB
- SHA256 2774285284f2f28dee36c22249da779e2d17d4a6a29ec284e8d8b060388e542c
- MD5 31240916c4075e0cb7fece16bedcd0ae
- SHA1 de2a5c34746837bb94d2e651570077e7d077315d
- SHA512 31b1eb4ac0d332e512ac53ea98134fac0a6cce370cc32fa3048ecb30a81b133d6640116d1644fc3b66dc4a4f69a2841abffbc3b97297325dfe7c1a56d1940f67
- SSDEEP 393216:4/ic+58Z90av1IE/0ZlFwMDdJvhSDELtRhpolsVWd5JbnFZeMNQNt/ZCFLy/npHw:puv+YURBVWd51hNQNt/ZYLy/pj8TTgq
- TLSH T18C08AD15E3E84616E52FC2BDC6638413D2B1BC971322D6CF0454F6992F73BD2AB36262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers