General
- Target 2026-07-16_ecf66bc4429453084400a627ddf19bc7_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_utkonos_vidar_zxxz
- Size 61.2MB
- Sample260716-l2vabady41
- SHA256 ea0c166042f1b3d0541071b1fc2449f2f01b3f81cb183746a1f1fc0b443b40be
- MD5 ecf66bc4429453084400a627ddf19bc7
- SHA1 2d33a57c2f6edc53cbb1b7c068e0c505df047c30
- SHA512 a79eca2b44b72e42d47fe4ac132e26b739736a441771dd23a8ed20cd6d7ed36a58c8af2b621cfb01ad335dc0f4a2ac2a566e414ab8edfbfd4c9719124dc9f2db
- SSDEEP 393216:YsqGxqsktO5GG02US1P+/U7q7K0mAb5ZUjcDUND3usyBvaRRMV+o33irYVI31BLT:Y4lmOIUMFCrYVKAGmjvM
- TLSH T166E7494666EA0881FDF7EA348AF65513C633BC166F3185CF610C1B2A1F776E08976722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_ecf66bc4429453084400a627ddf19bc7_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_ecf66bc4429453084400a627ddf19bc7_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_ecf66bc4429453084400a627ddf19bc7_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_utkonos_vidar_zxxz
- Size 61.2MB
- SHA256 ea0c166042f1b3d0541071b1fc2449f2f01b3f81cb183746a1f1fc0b443b40be
- MD5 ecf66bc4429453084400a627ddf19bc7
- SHA1 2d33a57c2f6edc53cbb1b7c068e0c505df047c30
- SHA512 a79eca2b44b72e42d47fe4ac132e26b739736a441771dd23a8ed20cd6d7ed36a58c8af2b621cfb01ad335dc0f4a2ac2a566e414ab8edfbfd4c9719124dc9f2db
- SSDEEP 393216:YsqGxqsktO5GG02US1P+/U7q7K0mAb5ZUjcDUND3usyBvaRRMV+o33irYVI31BLT:Y4lmOIUMFCrYVKAGmjvM
- TLSH T166E7494666EA0881FDF7EA348AF65513C633BC166F3185CF610C1B2A1F776E08976722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to get system information as a root user.
-
Enumerates processes with tasklist