d58b6adf4cfc3ddd7cc16af774193906d8f98a60352307b32742d994fb782463

General

Target
2026-07-02_2adadb6714e65d95745c9d427dba711b_cobalt-strike_coinminer_elex_glassworm_icedid_njrat_stealc_swisyn_vidar_wannacry
Size 7.4MB
Sample260702-qsaa1acv2r
SHA256 d58b6adf4cfc3ddd7cc16af774193906d8f98a60352307b32742d994fb782463
MD5 2adadb6714e65d95745c9d427dba711b
SHA1 a36e2edef51ad3ac0469771dfe9b2d627a781231
SHA512 0013e90267c82ba4aed0574923abc703fac8801eeb4e1be84b9bd57440fabbb5a8d6d9ba5cae1677953b7c9b3951e95352a737f6f4f9cbed53ec4f1843b36a58
SSDEEP 98304:BF+FrNL4TlyNLjZ44tko0mdrkGSHKafsHK+23Ww1j4DO8ZQoovaPifAEC/P:b2rN8TINLjZ+7aui5O8saAAEuP
TLSH
T1B1769E47A3E801ECD0BBC17C89569613E7B2B85513709BCF16A186761F63AF26E3E710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-07-02_2adadb6714e65d95745c9d427dba711b_cobalt-strike_coinminer_elex_glassworm_icedid_njrat_stealc_swisyn_vidar_wannacry
- Size 7.4MB
- SHA256 d58b6adf4cfc3ddd7cc16af774193906d8f98a60352307b32742d994fb782463
- MD5 2adadb6714e65d95745c9d427dba711b
- SHA1 a36e2edef51ad3ac0469771dfe9b2d627a781231
- SHA512 0013e90267c82ba4aed0574923abc703fac8801eeb4e1be84b9bd57440fabbb5a8d6d9ba5cae1677953b7c9b3951e95352a737f6f4f9cbed53ec4f1843b36a58
- SSDEEP 98304:BF+FrNL4TlyNLjZ44tko0mdrkGSHKafsHK+23Ww1j4DO8ZQoovaPifAEC/P:b2rN8TINLjZ+7aui5O8saAAEuP
- TLSH
  T1B1769E47A3E801ECD0BBC17C89569613E7B2B85513709BCF16A186761F63AF26E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

bootkit defense_evasion discovery persistence spyware trojan
- Modifies visibility of hidden/system files in Explorer
  defense_evasion
- Executes dropped EXE
- Loads dropped DLL
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Drops file in System32 directory
behavioral1 behavioral2