General
- Target 2026-07-12_0208666e053d527d63f5eb42b1fad81d_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 3.9MB
- Sample260712-wp954sez8q
- SHA256 6437d8dc4aa9b6da92539f630fd7cbc44593570635869b21cdd16466f99cf260
- MD5 0208666e053d527d63f5eb42b1fad81d
- SHA1 1fe979dc8f9678e995900b31eea3add4d5251d59
- SHA512 d9707827f46b7cb640cd0c72f26b8caf3b03cda7cdb362140d9d40c3abc0e9f2d7db9b44d66f3688b587c6064d84b443ff8a18e08683c9803d8ac9ad5b53189f
- SSDEEP 98304:r1b5aMSa8EPDtGIyonkjlppzh5wavMNuuVftSQ0t8u96hDazewvRwo:pHGIpnkjlHbw7w5
- TLSH T1F8168C5AB6A400F4C8BBC03DC55B8607E7F1B85543B4ABCB12A456BA0F637E15E3BB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-12_0208666e053d527d63f5eb42b1fad81d_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_0208666e053d527d63f5eb42b1fad81d_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 3.9MB
- SHA256 6437d8dc4aa9b6da92539f630fd7cbc44593570635869b21cdd16466f99cf260
- MD5 0208666e053d527d63f5eb42b1fad81d
- SHA1 1fe979dc8f9678e995900b31eea3add4d5251d59
- SHA512 d9707827f46b7cb640cd0c72f26b8caf3b03cda7cdb362140d9d40c3abc0e9f2d7db9b44d66f3688b587c6064d84b443ff8a18e08683c9803d8ac9ad5b53189f
- SSDEEP 98304:r1b5aMSa8EPDtGIyonkjlppzh5wavMNuuVftSQ0t8u96hDazewvRwo:pHGIpnkjlHbw7w5
- TLSH T1F8168C5AB6A400F4C8BBC03DC55B8607E7F1B85543B4ABCB12A456BA0F637E15E3BB50
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables referencing many IR and analysis tools
-
XMRig Miner payload