General
- Target 2026-07-12_ad06835f8f46c9f9e8fbcd07ee2ef574_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 36.2MB
- Sample260712-3wrexahy4l
- SHA256 adb0c5d832e2e5e032fadeaa2074aa523e2d2a90f2c5ed3ab881feb4a46862bb
- MD5 ad06835f8f46c9f9e8fbcd07ee2ef574
- SHA1 75c1da4c650df5d5caa4967452bf3941a67ef387
- SHA512 97fa484681718f52a8f1f07c6be4b64324eae2f8c3a3fbe32fe86184d3aec021c6b7dfaf49e9f67bb2a0c29d6fc3b1ba189c3d09638fd0586124ae371a4d2c70
- SSDEEP 393216:W1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYf5:WMguj8Q4Vfv7qFTrY6
- TLSH T1C4878B0773E60095E9B7D2388AA75507D773B8634331CADF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-12_ad06835f8f46c9f9e8fbcd07ee2ef574_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_ad06835f8f46c9f9e8fbcd07ee2ef574_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_ad06835f8f46c9f9e8fbcd07ee2ef574_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 36.2MB
- SHA256 adb0c5d832e2e5e032fadeaa2074aa523e2d2a90f2c5ed3ab881feb4a46862bb
- MD5 ad06835f8f46c9f9e8fbcd07ee2ef574
- SHA1 75c1da4c650df5d5caa4967452bf3941a67ef387
- SHA512 97fa484681718f52a8f1f07c6be4b64324eae2f8c3a3fbe32fe86184d3aec021c6b7dfaf49e9f67bb2a0c29d6fc3b1ba189c3d09638fd0586124ae371a4d2c70
- SSDEEP 393216:W1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYf5:WMguj8Q4Vfv7qFTrY6
- TLSH T1C4878B0773E60095E9B7D2388AA75507D773B8634331CADF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Enumerates processes with tasklist