General
- Target 2026-07-10_825f7d0f078b1ba95895f0f3ad86821f_cobalt-strike_coinminer_glassworm_hijackloader_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 22.3MB
- Sample260710-dbkn7act5p
- SHA256 3d7fcbda46f83b195d1f2e715e858b581c0576555cf99de4e2ff5bf5249d3ac1
- MD5 825f7d0f078b1ba95895f0f3ad86821f
- SHA1 720f3b6bd5ceba0ce2d871d3fda75fb25d175fc0
- SHA512 2b0ac6fe6eedb88bd757a00310e7edab2199e3e308cb235204fc2192d5c737222cf9d8ce7594f8b59407bd5a350e80b8c2b2175e7827f7d6673b1dddfe8dc6dc
- SSDEEP 393216:/TrvmIZM4oSVFzsypnRmFg7GFBvM/Mn13uRVi15v:HeIZRkuRVS5
- TLSH T1CD377C1AB6AC00D8D0FFE17C8646990BEBB17C5603755BCB1AD09E961F67AE05E3E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_825f7d0f078b1ba95895f0f3ad86821f_cobalt-strike_coinminer_glassworm_hijackloader_icedid_lu.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_825f7d0f078b1ba95895f0f3ad86821f_cobalt-strike_coinminer_glassworm_hijackloader_icedid_lu.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_825f7d0f078b1ba95895f0f3ad86821f_cobalt-strike_coinminer_glassworm_hijackloader_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 22.3MB
- SHA256 3d7fcbda46f83b195d1f2e715e858b581c0576555cf99de4e2ff5bf5249d3ac1
- MD5 825f7d0f078b1ba95895f0f3ad86821f
- SHA1 720f3b6bd5ceba0ce2d871d3fda75fb25d175fc0
- SHA512 2b0ac6fe6eedb88bd757a00310e7edab2199e3e308cb235204fc2192d5c737222cf9d8ce7594f8b59407bd5a350e80b8c2b2175e7827f7d6673b1dddfe8dc6dc
- SSDEEP 393216:/TrvmIZM4oSVFzsypnRmFg7GFBvM/Mn13uRVi15v:HeIZRkuRVS5
- TLSH T1CD377C1AB6AC00D8D0FFE17C8646990BEBB17C5603755BCB1AD09E961F67AE05E3E700
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.