General
- Target 2026-05-26_4de1063436cb12b0e7c3474a812465cb_cobalt-strike_coinminer_glassworm_hijackloader_icedid_krakenkeylogger_njrat_olympic-destroyer_poet-rat_quasar-rat_satacom_vidar
- Size 73.7MB
- Sample260526-vddgbsht5v
- SHA256 acdc72087976078521025b6e2a38f05251de8286dd886aef71c2077ed3baec12
- MD5 4de1063436cb12b0e7c3474a812465cb
- SHA1 1cf1de8456b8a0b8ccc61ccb92ad92799db8be86
- SHA512 99d0d567638dfe547b58b80e1378eb5b841e4bbba020c5906767b8428384930a417810ed75025008decad956354e68895aaaab8f283a8ca32717da937965d7a7
- SSDEEP 393216:d/ic+58Z90avMIE/0ZlFwMDdJvhSDELtRhpolsVWd5JbnFZeMNQNt/ZCFLy/npHH:KuvLYURBVWd51hNQNt/ZYLy/pj8TTg9
- TLSH T10108BE15E3E84716E52FC2BDCA638413D2F1F4971322D6CF0454E6992F63BD2AB36262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-26_4de1063436cb12b0e7c3474a812465cb_cobalt-strike_coinminer_glassworm_hijackloader_icedid_kr.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-26_4de1063436cb12b0e7c3474a812465cb_cobalt-strike_coinminer_glassworm_hijackloader_icedid_kr.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-26_4de1063436cb12b0e7c3474a812465cb_cobalt-strike_coinminer_glassworm_hijackloader_icedid_krakenkeylogger_njrat_olympic-destroyer_poet-rat_quasar-rat_satacom_vidar
- Size 73.7MB
- SHA256 acdc72087976078521025b6e2a38f05251de8286dd886aef71c2077ed3baec12
- MD5 4de1063436cb12b0e7c3474a812465cb
- SHA1 1cf1de8456b8a0b8ccc61ccb92ad92799db8be86
- SHA512 99d0d567638dfe547b58b80e1378eb5b841e4bbba020c5906767b8428384930a417810ed75025008decad956354e68895aaaab8f283a8ca32717da937965d7a7
- SSDEEP 393216:d/ic+58Z90avMIE/0ZlFwMDdJvhSDELtRhpolsVWd5JbnFZeMNQNt/ZCFLy/npHH:KuvLYURBVWd51hNQNt/ZYLy/pj8TTg9
- TLSH T10108BE15E3E84716E52FC2BDCA638413D2F1F4971322D6CF0454E6992F63BD2AB36262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers