General

  • Target
    2026-06-30_10975843338d93a9a2d6b387038974a3_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
  • Size 38.3MB
  • Sample260701-a2m1fsds9s
  • SHA256 a717bbbba66cc8cd4b72d1e2d2c13333a5c427dbb116f7fce71ac41f74cdcc57
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-06-30_10975843338d93a9a2d6b387038974a3_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
    • Size 38.3MB
    • SHA256 a717bbbba66cc8cd4b72d1e2d2c13333a5c427dbb116f7fce71ac41f74cdcc57
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Obfuscated Files or Information: Command Obfuscation

      Adversaries may obfuscate content during command execution to impede detection.

MITRE ATT&CK Enterprise v16

Tasks