General
- Target 2026-07-11_4ebd5b8c15ad2e16ea7ce937376467de_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 35.9MB
- Sample260711-qqwffsdt5z
- SHA256 a9eb128cbc3d6fd918a18690d3421814f1f0eada63683421f21be34588280510
- MD5 4ebd5b8c15ad2e16ea7ce937376467de
- SHA1 447b6e2680f188726a455edc40feed4062562a00
- SHA512 9ac293602153e25d644c784d03eca46a02f7f40e1d21d5354d5e93a1bb88ce26c02f2af1312d142b4521ed4e25e0f54422f89a0b860aa355d0c644c7505e9f57
- SSDEEP 393216:J1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfN:JMguj8Q4Vfv1qFTrYY
- TLSH T1F0878B0773E60095E9B7D1388AA65507D773B8638331CBDF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_4ebd5b8c15ad2e16ea7ce937376467de_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_4ebd5b8c15ad2e16ea7ce937376467de_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win11ltsc2024-20260710-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_4ebd5b8c15ad2e16ea7ce937376467de_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 35.9MB
- SHA256 a9eb128cbc3d6fd918a18690d3421814f1f0eada63683421f21be34588280510
- MD5 4ebd5b8c15ad2e16ea7ce937376467de
- SHA1 447b6e2680f188726a455edc40feed4062562a00
- SHA512 9ac293602153e25d644c784d03eca46a02f7f40e1d21d5354d5e93a1bb88ce26c02f2af1312d142b4521ed4e25e0f54422f89a0b860aa355d0c644c7505e9f57
- SSDEEP 393216:J1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfN:JMguj8Q4Vfv1qFTrYY
- TLSH T1F0878B0773E60095E9B7D1388AA65507D773B8638331CBDF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates processes with tasklist
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1