General
- Target 2026-06-25_5acd1edeb4f21088d2171309f54082a1_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 36.0MB
- Sample260629-15djasgv2v
- SHA256 c651270ffe25bb9fdf7c28bcfea1ce32cc15af93e9d2a714cc8bf71253c8521f
- MD5 5acd1edeb4f21088d2171309f54082a1
- SHA1 a7d9d20f93bd34c89acba8491522e954a34335b9
- SHA512 8fc0d97409db03d3882e3dea53feef1186ac84254dc29a203bde7f52d36f8db21a53913786fd26cc4d03cfb775bcd861e5f44ebbc1659abfc2d4654770a19cd9
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfb:fMguj8Q4VfviqFTrYX
- TLSH T1D7878B0773E60095E9B7D1388AA64507D773B8678331CBDF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-25_5acd1edeb4f21088d2171309f54082a1_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_5acd1edeb4f21088d2171309f54082a1_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_5acd1edeb4f21088d2171309f54082a1_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 36.0MB
- SHA256 c651270ffe25bb9fdf7c28bcfea1ce32cc15af93e9d2a714cc8bf71253c8521f
- MD5 5acd1edeb4f21088d2171309f54082a1
- SHA1 a7d9d20f93bd34c89acba8491522e954a34335b9
- SHA512 8fc0d97409db03d3882e3dea53feef1186ac84254dc29a203bde7f52d36f8db21a53913786fd26cc4d03cfb775bcd861e5f44ebbc1659abfc2d4654770a19cd9
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfb:fMguj8Q4VfviqFTrYX
- TLSH T1D7878B0773E60095E9B7D1388AA64507D773B8678331CBDF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Enumerates processes with tasklist