General
- Target 2026-07-16_3ee4ae2a501fe4cccba9304d61192c13_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 8.2MB
- Sample260716-n3traaf18y
- SHA256 d9473eec2497fc81b62d2f01123e55c3438660b2e2f0af9fbde47d8f7ea21b6c
- MD5 3ee4ae2a501fe4cccba9304d61192c13
- SHA1 19892a43e3d02f20be6373ba4cd4df7964389dd9
- SHA512 23074fc07896770714041e959df46bc8b11cc2f134d1b2ee0ee5a3983295ff28e1035b73c62d942bf0eb163636e61b5f44f0b5391fdc7dd620a859ddaf4ad964
- SSDEEP 98304:Kgo4DknwzlPhPxYmzkRm6wZ1i0tsKzDeT007kxS+zkbV5O:KZWknwzrPxhzmm681i0ts0D9076C5
- TLSH T12296BF5BA7E800E8D8B7D17CC996C503EBB2B81157319BDF06A4566A0F73AE05E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_3ee4ae2a501fe4cccba9304d61192c13_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_3ee4ae2a501fe4cccba9304d61192c13_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 8.2MB
- SHA256 d9473eec2497fc81b62d2f01123e55c3438660b2e2f0af9fbde47d8f7ea21b6c
- MD5 3ee4ae2a501fe4cccba9304d61192c13
- SHA1 19892a43e3d02f20be6373ba4cd4df7964389dd9
- SHA512 23074fc07896770714041e959df46bc8b11cc2f134d1b2ee0ee5a3983295ff28e1035b73c62d942bf0eb163636e61b5f44f0b5391fdc7dd620a859ddaf4ad964
- SSDEEP 98304:Kgo4DknwzlPhPxYmzkRm6wZ1i0tsKzDeT007kxS+zkbV5O:KZWknwzrPxhzmm681i0ts0D9076C5
- TLSH T12296BF5BA7E800E8D8B7D17CC996C503EBB2B81157319BDF06A4566A0F73AE05E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1