General
- Target 2026-05-28_b68db7ff91a3db7a42cec5b479c5ad1b_cobalt-strike_coinminer_glassworm_hijackloader_icedid_krakenkeylogger_njrat_olympic-destroyer_poet-rat_quasar-rat_satacom_vidar
- Size 75.8MB
- Sample260528-hdxtrag15r
- SHA256 4e602b9d13bea0275f27ee807cb57e481b976e38d15ae5bd0c4bf8537290fa7e
- MD5 b68db7ff91a3db7a42cec5b479c5ad1b
- SHA1 19544a80393c5f087939a3f704880d1b49c6c5a5
- SHA512 f6946402731060be2bac3e0383785b91b6312982318774b7519c14743f11e3a3105842e909cec57dcf54f021f889901a94fe2bab8fada7f9cde822d8a703c2b5
- SSDEEP 786432:HuvPYURBVWd51hNQNt/ZYLy/pj8TTg3i:HyYURSvrNQNt/ZLjJ
- TLSH T1C508BE15E3E84716E52FC2BDCA638413D6F1F4971322D6CF0454E6892F63BD2AB36262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-28_b68db7ff91a3db7a42cec5b479c5ad1b_cobalt-strike_coinminer_glassworm_hijackloader_icedid_kr.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-28_b68db7ff91a3db7a42cec5b479c5ad1b_cobalt-strike_coinminer_glassworm_hijackloader_icedid_kr.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-28_b68db7ff91a3db7a42cec5b479c5ad1b_cobalt-strike_coinminer_glassworm_hijackloader_icedid_krakenkeylogger_njrat_olympic-destroyer_poet-rat_quasar-rat_satacom_vidar
- Size 75.8MB
- SHA256 4e602b9d13bea0275f27ee807cb57e481b976e38d15ae5bd0c4bf8537290fa7e
- MD5 b68db7ff91a3db7a42cec5b479c5ad1b
- SHA1 19544a80393c5f087939a3f704880d1b49c6c5a5
- SHA512 f6946402731060be2bac3e0383785b91b6312982318774b7519c14743f11e3a3105842e909cec57dcf54f021f889901a94fe2bab8fada7f9cde822d8a703c2b5
- SSDEEP 786432:HuvPYURBVWd51hNQNt/ZYLy/pj8TTg3i:HyYURSvrNQNt/ZLjJ
- TLSH T1C508BE15E3E84716E52FC2BDCA638413D6F1F4971322D6CF0454E6892F63BD2AB36262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers