General
- Target 2026-06-28_e35b04daf93dc612a922b83df6a0608e_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 3.7MB
- Sample260628-w1827abz4l
- SHA256 9bb7db69210fe12198dc939e705c80343f28d870cb997d298304bd5401dfa622
- MD5 e35b04daf93dc612a922b83df6a0608e
- SHA1 b62151dada742095b90419b21cfa1a83aa613102
- SHA512 00ba671601ade4ef863a338cfc3b24bae250c7d0c5f4cf057de0fc5089901c9a55dc442b26bc12b693edb29a087417501bb6864bbc4e46c8dcda8a59d01c9a09
- SSDEEP 98304:ahR54wJzGEMzAwJ1J+2VUVDoa/1AFkyoUOgg:iR55DMbJ+veajyo7
- TLSH T12106BF7AA6A820F9D1A7D178D9079907F77178160770AFDB03A40A561F63EE40FBE381
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_e35b04daf93dc612a922b83df6a0608e_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_e35b04daf93dc612a922b83df6a0608e_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260618-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_e35b04daf93dc612a922b83df6a0608e_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 3.7MB
- SHA256 9bb7db69210fe12198dc939e705c80343f28d870cb997d298304bd5401dfa622
- MD5 e35b04daf93dc612a922b83df6a0608e
- SHA1 b62151dada742095b90419b21cfa1a83aa613102
- SHA512 00ba671601ade4ef863a338cfc3b24bae250c7d0c5f4cf057de0fc5089901c9a55dc442b26bc12b693edb29a087417501bb6864bbc4e46c8dcda8a59d01c9a09
- SSDEEP 98304:ahR54wJzGEMzAwJ1J+2VUVDoa/1AFkyoUOgg:iR55DMbJ+veajyo7
- TLSH T12106BF7AA6A820F9D1A7D178D9079907F77178160770AFDB03A40A561F63EE40FBE381
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.