General
- Target 2026-07-12_c9e6e03e6d78a4a6e54d6200d993e339_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 38.8MB
- Sample260712-3tmc6sbz4t
- SHA256 33550c2d28f90f01f3452a1773f43614b5fc58a4e87d683a5dee18aa8804b705
- MD5 c9e6e03e6d78a4a6e54d6200d993e339
- SHA1 c0649f27b6655a11f3789c3f5225bb41e59c6f80
- SHA512 576dc49c5037a3b56053424be593e259567edb4b4beedcadc9b29ef25696780a4f84999fdf674889445b38b6437903211372afdbeeaa37a6e6b232ba73e31a74
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfQ:fMguj8Q4Vfv/qFTrYN
- TLSH T191978C0773E600A5E5B3E1388AA74503E773B4635731CADF329D06551FABAE09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-12_c9e6e03e6d78a4a6e54d6200d993e339_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_c9e6e03e6d78a4a6e54d6200d993e339_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_c9e6e03e6d78a4a6e54d6200d993e339_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 38.8MB
- SHA256 33550c2d28f90f01f3452a1773f43614b5fc58a4e87d683a5dee18aa8804b705
- MD5 c9e6e03e6d78a4a6e54d6200d993e339
- SHA1 c0649f27b6655a11f3789c3f5225bb41e59c6f80
- SHA512 576dc49c5037a3b56053424be593e259567edb4b4beedcadc9b29ef25696780a4f84999fdf674889445b38b6437903211372afdbeeaa37a6e6b232ba73e31a74
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfQ:fMguj8Q4Vfv/qFTrYN
- TLSH T191978C0773E600A5E5B3E1388AA74503E773B4635731CADF329D06551FABAE09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.