General
- Target 2026-07-11_a4aac12385672434b9aa47e364a8049e_cobalt-strike_coinminer_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 11.7MB
- Sample260711-dda8jacz81
- SHA256 e79bfb429b9de87ae8cf937425a0c2b2c1c65c01b2e088e56c0fd7ae4d592221
- MD5 a4aac12385672434b9aa47e364a8049e
- SHA1 ad99cd67a9c852fe399f2b030d4248ac90871910
- SHA512 8f9999adc374699b9df717a42811781fe18e0356c8686a96d82b387259067b002ebacabcf9478c0cc2d9ecab40469d017a4100fa0d2e74ae0c0c4d96de1d7252
- SSDEEP 196608:c7oes3sNq3PgggrRVRgNxHOs44gE6aI6HMaJTtGbM:c7A3s43PgFrnYS4gEl
- TLSH T132C639C5A7A442E6E0F7C27889664033EBF1B97F5530776F0925C9A60E73A108F79B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-11_a4aac12385672434b9aa47e364a8049e_cobalt-strike_coinminer_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_a4aac12385672434b9aa47e364a8049e_cobalt-strike_coinminer_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_a4aac12385672434b9aa47e364a8049e_cobalt-strike_coinminer_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 11.7MB
- SHA256 e79bfb429b9de87ae8cf937425a0c2b2c1c65c01b2e088e56c0fd7ae4d592221
- MD5 a4aac12385672434b9aa47e364a8049e
- SHA1 ad99cd67a9c852fe399f2b030d4248ac90871910
- SHA512 8f9999adc374699b9df717a42811781fe18e0356c8686a96d82b387259067b002ebacabcf9478c0cc2d9ecab40469d017a4100fa0d2e74ae0c0c4d96de1d7252
- SSDEEP 196608:c7oes3sNq3PgggrRVRgNxHOs44gE6aI6HMaJTtGbM:c7A3s43PgFrnYS4gEl
- TLSH T132C639C5A7A442E6E0F7C27889664033EBF1B97F5530776F0925C9A60E73A108F79B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association