2026-07-08_e0c1ea2f2dc61a3afdc5a3149b4a138b_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-08_e0c1ea2f2dc61a3afdc5a3149b4a138b_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar
Size 7.0MB
Sample260708-epe7asav3x
SHA256 a65c56388919239277de3a447038ceb2b4e1090e5f4e36959bf1666a8fac8d13
MD5 e0c1ea2f2dc61a3afdc5a3149b4a138b
SHA1 0ae7e60563a8a7db41f9ee96b23ce7fe3166e866
SHA512 f3b14f23fef4e9919d35cd534229dd1fafc20fd929a1c7e31cb3708e0ebcf2db7b77c5be1860821699f676d9a8f0eb49164d8ac0a5502cb193326870cdcb8a81
SSDEEP 98304:B+stFgNz7FnkU9/YyeAAYf4KYTJcGthLOlrKR3dws7BMuO1LldCcUu:B9eR7FkU6ybAagcGLSitw6MP1LGcv
TLSH
T16976E152B6B401B4D97AC1788D924A6BEBB5B47523A057CF43B4CA771F23EE0163E318
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-08_e0c1ea2f2dc61a3afdc5a3149b4a138b_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar

File Explorer

2026-07-08_e0c1ea2f2dc61a3afdc5a3149b4a138b_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar

.exe 7.0MB

2026-07-08_e0c1ea2f2dc61a3afdc5a3149b4a138b_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar

IMPHASH 6da1ba8592a0d8c9528cec618e32ec55
SHA256 a65c56388919239277de3a447038ceb2b4e1090e5f4e36959bf1666a8fac8d13
MD5 e0c1ea2f2dc61a3afdc5a3149b4a138b
SHA1 0ae7e60563a8a7db41f9ee96b23ce7fe3166e866
SHA512 f3b14f23fef4e9919d35cd534229dd1fafc20fd929a1c7e31cb3708e0ebcf2db7b77c5be1860821699f676d9a8f0eb49164d8ac0a5502cb193326870cdcb8a81
SSDEEP 98304:B+stFgNz7FnkU9/YyeAAYf4KYTJcGthLOlrKR3dws7BMuO1LldCcUu:B9eR7FkU6ybAagcGLSitw6MP1LGcv
TLSH
T16976E152B6B401B4D97AC1788D924A6BEBB5B47523A057CF43B4CA771F23EE0163E318
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7123712

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

PDB paths

winmm

timeBeginPeriod timeGetDevCaps

ws2_32

setsockopt htonl getsockopt WSARecv FreeAddrInfoW WSACleanup recv send WSASetLastError WSAIoctl closesocket WSAGetLastError WSASend shutdown WSASocketW WSAStartup getsockname socket connect GetAddrInfoW bind

ntdll

RtlVirtualUnwind RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlNtStatusToDosError RtlPcToFileHeader

ncrypt

BCryptGenRandom NCryptGetProperty NCryptFreeObject

crypt32

CryptAcquireCertificatePrivateKey CertGetCertificateChain CertFreeCertificateContext CertGetNameStringA CertGetCertificateContextProperty CertFindCertificateInStore CertCreateContext CertCreateCertificateChainEngine CertVerifyCertificateChainPolicy CertOpenStore CertFreeCertificateChain CertSetCertificateContextProperty PFXExportCertStoreEx CertCloseStore CertAddCertificateContextToStore CertFreeCertificateChainEngine

iphlpapi

GetCurrentThreadCompartmentId SetCurrentThreadCompartmentId

gdiplus

GdipCreateFromHDC GdipFillEllipseI GdipCreateBitmapFromGraphics GdipSetTextRenderingHint GdipStringFormatGetGenericTypographic GdipMeasureString GdipGetImageGraphicsContext GdipFillRectangleI GdipGetFontCollectionFamilyCount GdipDeleteGraphics GdipDrawString GdipDeleteFont GdipGetImageWidth GdipDeletePen GdipDrawImageI GdipCreatePen1 GdipNewPrivateFontCollection GdipDeletePrivateFontCollection GdipDrawArcI GdipDrawLineI GdipSetStringFormatFlags GdipGetFontHeight GdipLoadImageFromStream GdiplusStartup GdiplusShutdown GdipImageSelectActiveFrame GdipSetClipRectI GdipSetSolidFillColor GdipDrawBezierI GdipCreateFromHWND GdipSetPenWidth GdipGraphicsClear GdipFillPieI GdipCreateSolidFill GdipCreateFont GdipSetSmoothingMode GdipDisposeImage GdipGetFontCollectionFamilyList GdipDrawImageRectI GdipDrawEllipseI GdipDeleteBrush GdipDrawPolygonI GdipSetPenColor GdipDrawPieI GdipDrawRectangleI GdipFillPolygonI GdipGetImageHeight GdipDeleteStringFormat GdipPrivateAddMemoryFont

shlwapi

ord12

user32

GetKeyState SetCapture ReleaseCapture BeginPaint EndPaint GetMessageW DefWindowProcW PostMessageW SetProcessDpiAwarenessContext DestroyWindow SetWindowPos GetDpiForWindow CreateWindowExW DispatchMessageW UnregisterClassW ShowWindow IsWindow SetTimer PeekMessageW RegisterClassW TrackMouseEvent TranslateMessage LoadCursorA LoadIconA KillTimer PostQuitMessage SystemParametersInfoW ScreenToClient

advapi32

AdjustTokenPrivileges RegQueryValueExW LookupPrivilegeValueA OpenProcessToken RegCloseKey RegOpenKeyExW

kernel32

FreeLibraryAndExitThread PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime GetModuleFileNameW FlsGetValue GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetModuleHandleExW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadConsoleW SetFilePointerEx GetFileSizeEx SetStdHandle HeapReAlloc ExitProcess ReadFile GetLocaleInfoW GetDriveTypeW ExitThread GetTimeZoneInformation RaiseException OutputDebugStringW GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo GetStringTypeW LCMapStringEx GetLocaleInfoEx GetACP EncodePointer GetExitCodeThread SwitchToThread WaitForSingleObjectEx FormatMessageA LoadLibraryExW GetTickCount64 SleepConditionVariableSRW TryAcquireSRWLockExclusive AreFileApisANSI GetFullPathNameW GetFileInformationByHandle GetOEMCP GetCurrentDirectoryW CreateFileW FindFirstFileExW IsValidCodePage VirtualQuery FlsAlloc FlsFree GetSystemInfo GetNumaNodeProcessorMask FlsSetValue GetLargePageMinimum VirtualAlloc GetCurrentProcess VirtualFree GetNumaHighestNodeNumber GetCurrentProcessId WriteFile GetFileType GetEnvironmentVariableW GetStdHandle WideCharToMultiByte FindNextFileW FindFirstFileW FindClose TlsFree TlsSetValue TlsGetValue GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap HeapSize WriteConsoleW SetEndOfFile LocalFree SetPriorityClass WaitForSingleObject SetEvent CloseHandle CreateEventA InitializeCriticalSectionEx GetLastError DecodePointer DeleteCriticalSection MultiByteToWideChar EnterCriticalSection WakeAllConditionVariable WakeConditionVariable LeaveCriticalSection InitializeCriticalSection TlsAlloc GetCurrentProcessorNumberEx GetSystemTimeAdjustment GetActiveProcessorCount GetModuleHandleW GetSystemTimeAsFileTime QueryPerformanceCounter InitializeSListHead InterlockedPopEntrySList InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockShared InterlockedPushEntrySList QueryDepthSList GetCurrentThreadId ResetEvent SetThreadPriority CreateThread SetThreadIdealProcessor SetThreadGroupAffinity HeapCreate HeapFree GetLogicalProcessorInformationEx QueryPerformanceFrequency HeapAlloc HeapDestroy GlobalMemoryStatusEx CancelIo PostQueuedCompletionStatus LoadLibraryA CancelIoEx GetQueuedCompletionStatusEx GetCurrentProcessorNumber GetProcAddress FreeLibrary CreateIoCompletionPort SetFileCompletionNotificationModes Sleep SetLastError GetSystemTime SystemTimeToFileTime InitializeCriticalSectionAndSpinCount

Name

.text

Size

2.5MB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

635KB

Virtual Size

871KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

94KB

Virtual Size

94KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.v_T

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.Px*

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.4'D

Size

514KB

Virtual Size

514KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-08_e0c1ea2f2dc61a3afdc5a3149b4a138b_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar

winmm

ws2_32

ntdll

ncrypt

crypt32

iphlpapi

gdiplus

shlwapi

user32

advapi32

kernel32

generic