General
- Target 2026-07-06_7bfb30a6d0dd8097e44695dabad9b4c1_cobalt-strike_coinminer_glassworm_icedid_njrat_remcos_satacom_sliver_stealc_vidar
- Size 13.7MB
- Sample260707-c9186adv7k
- SHA256 3aba285c1036e61937940a39c23ef7fb5b0040c68a8ed652537407a1d5262b6a
- MD5 7bfb30a6d0dd8097e44695dabad9b4c1
- SHA1 98796221104b70222e228a0594fae6286aabc9a2
- SHA512 76c0f5b562228ac997aad869ef7d86eb7da87496e08039d2f010531f6ad94e82d3cdd67d65c60aa77f75fafb08fcb110d6f3628380d5fc05bb230654af1d8102
- SSDEEP 196608:ousZMg9RRs/fsjYD9fPI6j7MA/gRy1iX+aSk:SZMg9RRs/fsYBI6j7BgX+/k
- TLSH T19AE68D5A639400D4D0F2C179C6036A03E7F2781653B39BF7359D99261F27AF2993BE22
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_7bfb30a6d0dd8097e44695dabad9b4c1_cobalt-strike_coinminer_glassworm_icedid_njrat_remcos_sa.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_7bfb30a6d0dd8097e44695dabad9b4c1_cobalt-strike_coinminer_glassworm_icedid_njrat_remcos_sa.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_7bfb30a6d0dd8097e44695dabad9b4c1_cobalt-strike_coinminer_glassworm_icedid_njrat_remcos_satacom_sliver_stealc_vidar
- Size 13.7MB
- SHA256 3aba285c1036e61937940a39c23ef7fb5b0040c68a8ed652537407a1d5262b6a
- MD5 7bfb30a6d0dd8097e44695dabad9b4c1
- SHA1 98796221104b70222e228a0594fae6286aabc9a2
- SHA512 76c0f5b562228ac997aad869ef7d86eb7da87496e08039d2f010531f6ad94e82d3cdd67d65c60aa77f75fafb08fcb110d6f3628380d5fc05bb230654af1d8102
- SSDEEP 196608:ousZMg9RRs/fsjYD9fPI6j7MA/gRy1iX+aSk:SZMg9RRs/fsYBI6j7BgX+/k
- TLSH T19AE68D5A639400D4D0F2C179C6036A03E7F2781653B39BF7359D99261F27AF2993BE22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.