General
- Target 2026-07-08_338357033ab79c256bc4c74af56ac1d6_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar
- Size 7.0MB
- Sample260708-ffaqwsa16s
- SHA256 33e0a1503d7b00d06d1cb8f39f91942e594e43e99c0fdc274b2ec50034f570ce
- MD5 338357033ab79c256bc4c74af56ac1d6
- SHA1 02f918a4beeda2c53e117c546770ff4c60d68f18
- SHA512 ffc48328b13180d3c3f6e14dee2ad7f6e1d1b095d2b2d27eaee87b8b048683ab7c10087fe15ff0c553bc017e40642d057ca311af996c63d34d33e98c6f85ed95
- SSDEEP 196608:8q9uHbRemSGiMut7Ydprw2C8NInOAM80ROmY6:8ZHbRe8iMutcdhRIQjj
- TLSH T13376E046F6B401E4DC76C738E5DA4A3BFAB5746513B06ACF06B8C6671B13AE2563E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_338357033ab79c256bc4c74af56ac1d6_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_338357033ab79c256bc4c74af56ac1d6_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260706-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_338357033ab79c256bc4c74af56ac1d6_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar
- Size 7.0MB
- SHA256 33e0a1503d7b00d06d1cb8f39f91942e594e43e99c0fdc274b2ec50034f570ce
- MD5 338357033ab79c256bc4c74af56ac1d6
- SHA1 02f918a4beeda2c53e117c546770ff4c60d68f18
- SHA512 ffc48328b13180d3c3f6e14dee2ad7f6e1d1b095d2b2d27eaee87b8b048683ab7c10087fe15ff0c553bc017e40642d057ca311af996c63d34d33e98c6f85ed95
- SSDEEP 196608:8q9uHbRemSGiMut7Ydprw2C8NInOAM80ROmY6:8ZHbRe8iMutcdhRIQjj
- TLSH T13376E046F6B401E4DC76C738E5DA4A3BFAB5746513B06ACF06B8C6671B13AE2563E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Indicator Removal: Clear Windows Event Logs
Clear Windows Event Logs to hide the activity of an intrusion.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext