General
- Target 2026-07-12_d502506a83b5d292ee4267e146f3db29_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 33.0MB
- Sample260712-j79wvaew6k
- SHA256 6322298f0c8c9b7a04b02a63b1beb05d8794bdebf46a9d29505b496fbcb9239a
- MD5 d502506a83b5d292ee4267e146f3db29
- SHA1 cb85771bf23995538168e88a2c0eb02cd9c9b46a
- SHA512 bf2fbeadc1a3f1cabdd8cea4a2f56f61b00294be7476fdddbb95661507ba4abf944da1611dab7d908070553e5961ef9acf67aa28bba02af98b13638a5b823b84
- SSDEEP 393216:uQgHDlanaGBXvDKtz+bhPWES4tiNQPNrIKc4gaPbUAgrO4mgCw6l+ZArYsiRXXSt:u3on1HvSzxAMNCiZArYTm3
- TLSH T1F0779D03B2A601D5E4B7D1388AA74203D772B8674731DACF325D02161FBBAE09A7F765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_d502506a83b5d292ee4267e146f3db29_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_d502506a83b5d292ee4267e146f3db29_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_d502506a83b5d292ee4267e146f3db29_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 33.0MB
- SHA256 6322298f0c8c9b7a04b02a63b1beb05d8794bdebf46a9d29505b496fbcb9239a
- MD5 d502506a83b5d292ee4267e146f3db29
- SHA1 cb85771bf23995538168e88a2c0eb02cd9c9b46a
- SHA512 bf2fbeadc1a3f1cabdd8cea4a2f56f61b00294be7476fdddbb95661507ba4abf944da1611dab7d908070553e5961ef9acf67aa28bba02af98b13638a5b823b84
- SSDEEP 393216:uQgHDlanaGBXvDKtz+bhPWES4tiNQPNrIKc4gaPbUAgrO4mgCw6l+ZArYsiRXXSt:u3on1HvSzxAMNCiZArYTm3
- TLSH T1F0779D03B2A601D5E4B7D1388AA74203D772B8674731DACF325D02161FBBAE09A7F765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates processes with tasklist