General

  • Target
    2026-07-08_e0c1ea2f2dc61a3afdc5a3149b4a138b_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar
  • Size 7.0MB
  • Sample260708-epe7asav3x
  • SHA256 a65c56388919239277de3a447038ceb2b4e1090e5f4e36959bf1666a8fac8d13
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-08_e0c1ea2f2dc61a3afdc5a3149b4a138b_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar
    • Size 7.0MB
    • SHA256 a65c56388919239277de3a447038ceb2b4e1090e5f4e36959bf1666a8fac8d13
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Indicator Removal: Clear Windows Event Logs

      Clear Windows Event Logs to hide the activity of an intrusion.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks