General
- Target 2026-07-05_4d61079f61cbf84712bb74d951d4819e_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 7.7MB
- Sample260705-b2v7hags6w
- SHA256 100e3e1de90e0171816edaed879de152ddfd9d352d8ade4a6184fc2de2cbb2a5
- MD5 4d61079f61cbf84712bb74d951d4819e
- SHA1 9a7a73127fcf6debfc396c1f3dd84aca5609225c
- SHA512 d08fc36a9a9cab48805494912d4405b83aeb5ce0147039af529719ba3537cf7cae973ad5a48422e87138bc1509cac16cf8944d1eea8fdd010ddac2a8513b3c57
- SSDEEP 98304:effRmgXKLFEx3rejJ9fL/NqeuwHloNRejxYmFQ:eBmJFEteXxqecN8f
- TLSH T12B869D6763A800E9D4BBC17CDA56AA07E7B1781603719BDF02A0466B1F63BF15E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_4d61079f61cbf84712bb74d951d4819e_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_4d61079f61cbf84712bb74d951d4819e_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_4d61079f61cbf84712bb74d951d4819e_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 7.7MB
- SHA256 100e3e1de90e0171816edaed879de152ddfd9d352d8ade4a6184fc2de2cbb2a5
- MD5 4d61079f61cbf84712bb74d951d4819e
- SHA1 9a7a73127fcf6debfc396c1f3dd84aca5609225c
- SHA512 d08fc36a9a9cab48805494912d4405b83aeb5ce0147039af529719ba3537cf7cae973ad5a48422e87138bc1509cac16cf8944d1eea8fdd010ddac2a8513b3c57
- SSDEEP 98304:effRmgXKLFEx3rejJ9fL/NqeuwHloNRejxYmFQ:eBmJFEteXxqecN8f
- TLSH T12B869D6763A800E9D4BBC17CDA56AA07E7B1781603719BDF02A0466B1F63BF15E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.