General

  • Target
    2026-07-12_c9e6e03e6d78a4a6e54d6200d993e339_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
  • Size 38.8MB
  • Sample260712-3tmc6sbz4t
  • SHA256 33550c2d28f90f01f3452a1773f43614b5fc58a4e87d683a5dee18aa8804b705
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-12_c9e6e03e6d78a4a6e54d6200d993e339_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
    • Size 38.8MB
    • SHA256 33550c2d28f90f01f3452a1773f43614b5fc58a4e87d683a5dee18aa8804b705
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Obfuscated Files or Information: Command Obfuscation

      Adversaries may obfuscate content during command execution to impede detection.

MITRE ATT&CK Enterprise v16

Tasks