General
- Target 2026-07-08_e0c1ea2f2dc61a3afdc5a3149b4a138b_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar
- Size 7.0MB
- Sample260708-epe7asav3x
- SHA256 a65c56388919239277de3a447038ceb2b4e1090e5f4e36959bf1666a8fac8d13
- MD5 e0c1ea2f2dc61a3afdc5a3149b4a138b
- SHA1 0ae7e60563a8a7db41f9ee96b23ce7fe3166e866
- SHA512 f3b14f23fef4e9919d35cd534229dd1fafc20fd929a1c7e31cb3708e0ebcf2db7b77c5be1860821699f676d9a8f0eb49164d8ac0a5502cb193326870cdcb8a81
- SSDEEP 98304:B+stFgNz7FnkU9/YyeAAYf4KYTJcGthLOlrKR3dws7BMuO1LldCcUu:B9eR7FkU6ybAagcGLSitw6MP1LGcv
- TLSH T16976E152B6B401B4D97AC1788D924A6BEBB5B47523A057CF43B4CA771F23EE0163E318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_e0c1ea2f2dc61a3afdc5a3149b4a138b_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_e0c1ea2f2dc61a3afdc5a3149b4a138b_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260706-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_e0c1ea2f2dc61a3afdc5a3149b4a138b_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar
- Size 7.0MB
- SHA256 a65c56388919239277de3a447038ceb2b4e1090e5f4e36959bf1666a8fac8d13
- MD5 e0c1ea2f2dc61a3afdc5a3149b4a138b
- SHA1 0ae7e60563a8a7db41f9ee96b23ce7fe3166e866
- SHA512 f3b14f23fef4e9919d35cd534229dd1fafc20fd929a1c7e31cb3708e0ebcf2db7b77c5be1860821699f676d9a8f0eb49164d8ac0a5502cb193326870cdcb8a81
- SSDEEP 98304:B+stFgNz7FnkU9/YyeAAYf4KYTJcGthLOlrKR3dws7BMuO1LldCcUu:B9eR7FkU6ybAagcGLSitw6MP1LGcv
- TLSH T16976E152B6B401B4D97AC1788D924A6BEBB5B47523A057CF43B4CA771F23EE0163E318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Indicator Removal: Clear Windows Event Logs
Clear Windows Event Logs to hide the activity of an intrusion.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext