General
- Target 2026-07-02_89bfe4e8286fabd05d2f9eba773bf163_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 3.9MB
- Sample260702-vpnfnsav6t
- SHA256 8c39bd3749b20fea3491c218bf66609e794238247509ae0bf55b3a727227be2c
- MD5 89bfe4e8286fabd05d2f9eba773bf163
- SHA1 1d6735f5b6fb9ad83a8ea2a411a8a8159dd0b152
- SHA512 d5ce92b918a2c7f168d1978672843f15c537b86d53eedeb5c7e7b3d92eeaf2d38a8bf7c3813a2191e31bfe245235ed1b80a9cb7b2214948147c3df622723219a
- SSDEEP 98304:f1b5aMSa8EPDtGIyonkjlppzh5wavMNuuVftSQ0t8u96hDazewvRwI:tHGIpnkjlHbw7w5
- TLSH T13C168C5AB6A400F4C8BBC03DC55B8607E7F1B85543B4ABCB12A456BA0F637E15E3BB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-02_89bfe4e8286fabd05d2f9eba773bf163_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_89bfe4e8286fabd05d2f9eba773bf163_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 3.9MB
- SHA256 8c39bd3749b20fea3491c218bf66609e794238247509ae0bf55b3a727227be2c
- MD5 89bfe4e8286fabd05d2f9eba773bf163
- SHA1 1d6735f5b6fb9ad83a8ea2a411a8a8159dd0b152
- SHA512 d5ce92b918a2c7f168d1978672843f15c537b86d53eedeb5c7e7b3d92eeaf2d38a8bf7c3813a2191e31bfe245235ed1b80a9cb7b2214948147c3df622723219a
- SSDEEP 98304:f1b5aMSa8EPDtGIyonkjlppzh5wavMNuuVftSQ0t8u96hDazewvRwI:tHGIpnkjlHbw7w5
- TLSH T13C168C5AB6A400F4C8BBC03DC55B8607E7F1B85543B4ABCB12A456BA0F637E15E3BB50
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables referencing many IR and analysis tools
-
XMRig Miner payload