General
- Target 2026-06-08_2b83c64aef2e24cde8440a52d986dcc8_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.2MB
- Sample260608-pyks9aes71
- SHA256 18ac60fcdbf3037b5255c2d42957f029e72f04d1da5284bb23507fb98cbfc3d6
- MD5 2b83c64aef2e24cde8440a52d986dcc8
- SHA1 86ae94297ac4f63bb98c04fb02c629dae72349f7
- SHA512 4018936d3eef1aa0886a9f9df93bd579a5cd7341a30e1ab6b9c9c66b1f858c289f7d9ae6d75fe9e01215cafa9a62793e3594f941e2be3b70503b626c61e51226
- SSDEEP 98304:T++dusi1oYlSiA7V261uGbFmQ7wRGpj3:C5si1oYlSiA7MMusFmMF9
- TLSH T189269D56665901FCD5B7D138C6CA5623E7B17C1603B18BCB02E4BA661F33AE26E3E341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-08_2b83c64aef2e24cde8440a52d986dcc8_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-08_2b83c64aef2e24cde8440a52d986dcc8_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-08_2b83c64aef2e24cde8440a52d986dcc8_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.2MB
- SHA256 18ac60fcdbf3037b5255c2d42957f029e72f04d1da5284bb23507fb98cbfc3d6
- MD5 2b83c64aef2e24cde8440a52d986dcc8
- SHA1 86ae94297ac4f63bb98c04fb02c629dae72349f7
- SHA512 4018936d3eef1aa0886a9f9df93bd579a5cd7341a30e1ab6b9c9c66b1f858c289f7d9ae6d75fe9e01215cafa9a62793e3594f941e2be3b70503b626c61e51226
- SSDEEP 98304:T++dusi1oYlSiA7V261uGbFmQ7wRGpj3:C5si1oYlSiA7MMusFmMF9
- TLSH T189269D56665901FCD5B7D138C6CA5623E7B17C1603B18BCB02E4BA661F33AE26E3E341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1