General
- Target 2026-07-07_1cdfe9c7f2ca745cea0d43abe31958c3_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar
- Size 7.0MB
- Sample260707-kdfatady2v
- SHA256 045aec29e1cf919306eceb6ddf14a8e090178fbeb7a134acad70060d3bcc80dc
- MD5 1cdfe9c7f2ca745cea0d43abe31958c3
- SHA1 305daf12788ef21665c1685fbfaa55d1fda3ce63
- SHA512 c53b39e65819cbd85276635a2d5f71abae4b3ba7bf7707ecea95739df0940e39edf5d78adfc440f656f4e40b85676499d8c4f7b17b6ee23f63cb36d94cecbaee
- SSDEEP 98304:B+stFgNz7FnkU9/YyeAAYf4KYTJcJthLOlrKR3dws7BMuO1LldCcUu:B9eR7FkU6ybAagcJLSitw6MP1LGcv
- TLSH T1EA76E152B6B401B4D97AC1788D924A6BEBB5B47523A057CF43B4CA771F23EE0163E318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_1cdfe9c7f2ca745cea0d43abe31958c3_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_1cdfe9c7f2ca745cea0d43abe31958c3_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260706-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_1cdfe9c7f2ca745cea0d43abe31958c3_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar
- Size 7.0MB
- SHA256 045aec29e1cf919306eceb6ddf14a8e090178fbeb7a134acad70060d3bcc80dc
- MD5 1cdfe9c7f2ca745cea0d43abe31958c3
- SHA1 305daf12788ef21665c1685fbfaa55d1fda3ce63
- SHA512 c53b39e65819cbd85276635a2d5f71abae4b3ba7bf7707ecea95739df0940e39edf5d78adfc440f656f4e40b85676499d8c4f7b17b6ee23f63cb36d94cecbaee
- SSDEEP 98304:B+stFgNz7FnkU9/YyeAAYf4KYTJcJthLOlrKR3dws7BMuO1LldCcUu:B9eR7FkU6ybAagcJLSitw6MP1LGcv
- TLSH T1EA76E152B6B401B4D97AC1788D924A6BEBB5B47523A057CF43B4CA771F23EE0163E318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Indicator Removal: Clear Windows Event Logs
Clear Windows Event Logs to hide the activity of an intrusion.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext