General
- Target 2026-07-12_2d6bc379d7bf76a9afa86a0118b3e17c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 48.5MB
- Sample260713-aev3jsb19w
- SHA256 0e0e9535df8229b04269a4400a933e7634e9a6f162b1956ad08c303acf1533e7
- MD5 2d6bc379d7bf76a9afa86a0118b3e17c
- SHA1 6cbb8ff447aa2be9d4162b9cb40bf0d64fb8a586
- SHA512 cd4462e298f44cbad87d8dc2cc7d22f7474c9730b18c8277447c00856b0a377f55f9d2791b3cbb6c4db784d195647bc3460ecc36e41dd002c600d514ffdd6867
- SSDEEP 393216:i1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfN:iMguj8Q4VfvRqFTrYsx
- TLSH T1AFB79D0673A505A6E5B3D2348AA74103E373B0576731CBDB329C03581FAFAE49E7A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_2d6bc379d7bf76a9afa86a0118b3e17c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_2d6bc379d7bf76a9afa86a0118b3e17c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_2d6bc379d7bf76a9afa86a0118b3e17c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 48.5MB
- SHA256 0e0e9535df8229b04269a4400a933e7634e9a6f162b1956ad08c303acf1533e7
- MD5 2d6bc379d7bf76a9afa86a0118b3e17c
- SHA1 6cbb8ff447aa2be9d4162b9cb40bf0d64fb8a586
- SHA512 cd4462e298f44cbad87d8dc2cc7d22f7474c9730b18c8277447c00856b0a377f55f9d2791b3cbb6c4db784d195647bc3460ecc36e41dd002c600d514ffdd6867
- SSDEEP 393216:i1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfN:iMguj8Q4VfvRqFTrYsx
- TLSH T1AFB79D0673A505A6E5B3D2348AA74103E373B0576731CBDB329C03581FAFAE49E7A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Enumerates processes with tasklist