General
- Target 2026-05-29_89852e6914f5e7ebc68f7ce711993c41_cobalt-strike_coinminer_cryptbot_glassworm_icedid_luca-stealer_njrat_poet-rat_satacom_stealc
- Size 7.3MB
- Sample260529-3wc8aadz2p
- SHA256 04fff757dedb2ed011d00eea3cb98710004b105d48626a3020fde59c72815da0
- MD5 89852e6914f5e7ebc68f7ce711993c41
- SHA1 373ef0b750866f98f305d19fa2e60f7a66a53d00
- SHA512 065e9cf3af6fe795c86a267fd4dc8ac3c8b14304a0efe66cfab0be5fb41341957d70ebe4efa8ab8780e9ab72685b253732dd27a4697833b1f0e70270c770303b
- SSDEEP 98304:QNfXTL44znj81/fh6ImzzJoDfuBcMv+A73XAk:Q9TDvsHh6ImzD+Fk
- TLSH T178769D51FAEB40F8D643C6308967962FE73174094336DBD7C6909E66EE13AE11E3B212
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-05-29_89852e6914f5e7ebc68f7ce711993c41_cobalt-strike_coinminer_cryptbot_glassworm_icedid_luca-s.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_89852e6914f5e7ebc68f7ce711993c41_cobalt-strike_coinminer_cryptbot_glassworm_icedid_luca-s.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_89852e6914f5e7ebc68f7ce711993c41_cobalt-strike_coinminer_cryptbot_glassworm_icedid_luca-stealer_njrat_poet-rat_satacom_stealc
- Size 7.3MB
- SHA256 04fff757dedb2ed011d00eea3cb98710004b105d48626a3020fde59c72815da0
- MD5 89852e6914f5e7ebc68f7ce711993c41
- SHA1 373ef0b750866f98f305d19fa2e60f7a66a53d00
- SHA512 065e9cf3af6fe795c86a267fd4dc8ac3c8b14304a0efe66cfab0be5fb41341957d70ebe4efa8ab8780e9ab72685b253732dd27a4697833b1f0e70270c770303b
- SSDEEP 98304:QNfXTL44znj81/fh6ImzzJoDfuBcMv+A73XAk:Q9TDvsHh6ImzD+Fk
- TLSH T178769D51FAEB40F8D643C6308967962FE73174094336DBD7C6909E66EE13AE11E3B212
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE