General
- Target 2026-06-25_8e2ac88f59e88040e1b36c3a206ad2af_cobalt-strike_coinminer_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 8.8MB
- Sample260629-zygrpsft6z
- SHA256 feeb8c3a2b97b57887679fa02550952fae4cb1ecb26de6f2c5d2718761c897a0
- MD5 8e2ac88f59e88040e1b36c3a206ad2af
- SHA1 6a2cafd22fdbd42b0579e21ccd9f22120b0d41a5
- SHA512 941d5f235499710bd29e93d50be5aa141aa3d7da61b1f4ea5e4bdc818d5d1a0f62d7ffd5a917e0d78d7663799385f4afe839973d68406fad1864ec2a815acc64
- SSDEEP 49152:tVOIU6i+GtlqqVwASO8J6u5koLOOgh6EeH+DVS86IS5lzgXzp94BjRGF24CPC77+:V+sb1g6+DtSA8RYCN58suk2ncozd4VxH
- TLSH T10B962B5AFEAE904BC089863C91C5F3A4DF7A7A4313364FC71DC08AF61E52ED46D29258
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_8e2ac88f59e88040e1b36c3a206ad2af_cobalt-strike_coinminer_elex_glassworm_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_8e2ac88f59e88040e1b36c3a206ad2af_cobalt-strike_coinminer_elex_glassworm_icedid_luca-steal.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_8e2ac88f59e88040e1b36c3a206ad2af_cobalt-strike_coinminer_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn_vidar
- Size 8.8MB
- SHA256 feeb8c3a2b97b57887679fa02550952fae4cb1ecb26de6f2c5d2718761c897a0
- MD5 8e2ac88f59e88040e1b36c3a206ad2af
- SHA1 6a2cafd22fdbd42b0579e21ccd9f22120b0d41a5
- SHA512 941d5f235499710bd29e93d50be5aa141aa3d7da61b1f4ea5e4bdc818d5d1a0f62d7ffd5a917e0d78d7663799385f4afe839973d68406fad1864ec2a815acc64
- SSDEEP 49152:tVOIU6i+GtlqqVwASO8J6u5koLOOgh6EeH+DVS86IS5lzgXzp94BjRGF24CPC77+:V+sb1g6+DtSA8RYCN58suk2ncozd4VxH
- TLSH T10B962B5AFEAE904BC089863C91C5F3A4DF7A7A4313364FC71DC08AF61E52ED46D29258
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory