General
- Target 2026-07-17_9aaab45497ac257fac656897a02c74ad_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 37.0MB
- Sample260717-1psnaaex6l
- SHA256 8cc5fd1fd606fb7bcc537f2887501221d7e75e7d1612685b03edb45f3381bb59
- MD5 9aaab45497ac257fac656897a02c74ad
- SHA1 88672970d54c4d7887e14709012fcf877392ffeb
- SHA512 722b54fd5f5529e961eebb7de76d8146b9f5b8b7bdca79a29798ac2665bf6a42e76ff39fbeadd7a1d3bbdbd873184270b672dfacc66f306644b75315b8b18cbb
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfT:fMguj8Q4Vfv5qFTrYjsv
- TLSH T198878B0773E60195E9B7D2388AA65507D773B8634331CBDF329D06151FABAE09A7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_9aaab45497ac257fac656897a02c74ad_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_9aaab45497ac257fac656897a02c74ad_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 37.0MB
- SHA256 8cc5fd1fd606fb7bcc537f2887501221d7e75e7d1612685b03edb45f3381bb59
- MD5 9aaab45497ac257fac656897a02c74ad
- SHA1 88672970d54c4d7887e14709012fcf877392ffeb
- SHA512 722b54fd5f5529e961eebb7de76d8146b9f5b8b7bdca79a29798ac2665bf6a42e76ff39fbeadd7a1d3bbdbd873184270b672dfacc66f306644b75315b8b18cbb
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfT:fMguj8Q4Vfv5qFTrYjsv
- TLSH T198878B0773E60195E9B7D2388AA65507D773B8634331CBDF329D06151FABAE09A7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.