General
- Target 2026-07-11_bd78bb8dc5c49f0a34f4021a0e8e289d_cobalt-strike_coinminer_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 12.0MB
- Sample260711-daxmcscz41
- SHA256 2014e730a555c131d7cef24c8886ce2fe94f791295632c89c313665c2e0dc6f5
- MD5 bd78bb8dc5c49f0a34f4021a0e8e289d
- SHA1 068a0ae5e30d28993561ba5ab2f69bd694de47ec
- SHA512 1d21aabcf668bec3a3dbdc60c7dbb26ae96e13d638327b8b60a3b55836a336b4f80c1de5b5fe379447dfefa0f044b5313d6d6548267cee3c5f5059ffe79539a4
- SSDEEP 196608:z7oes3sNq3PgggrRVRgNxHOs44gE6aI6HMaJTtGbM:z7A3s43PgFrnYS4gEl
- TLSH T1A7D64AC5A7A442E6E0F7C27889664033EBF1B97F5530776F0925C9A60E73A108F79B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-11_bd78bb8dc5c49f0a34f4021a0e8e289d_cobalt-strike_coinminer_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_bd78bb8dc5c49f0a34f4021a0e8e289d_cobalt-strike_coinminer_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_bd78bb8dc5c49f0a34f4021a0e8e289d_cobalt-strike_coinminer_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 12.0MB
- SHA256 2014e730a555c131d7cef24c8886ce2fe94f791295632c89c313665c2e0dc6f5
- MD5 bd78bb8dc5c49f0a34f4021a0e8e289d
- SHA1 068a0ae5e30d28993561ba5ab2f69bd694de47ec
- SHA512 1d21aabcf668bec3a3dbdc60c7dbb26ae96e13d638327b8b60a3b55836a336b4f80c1de5b5fe379447dfefa0f044b5313d6d6548267cee3c5f5059ffe79539a4
- SSDEEP 196608:z7oes3sNq3PgggrRVRgNxHOs44gE6aI6HMaJTtGbM:z7A3s43PgFrnYS4gEl
- TLSH T1A7D64AC5A7A442E6E0F7C27889664033EBF1B97F5530776F0925C9A60E73A108F79B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association