General
- Target 2026-07-17_56a25cf898c97d3f93c8d34a379bae69_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 13.1MB
- Sample260717-2vmvnab181
- SHA256 bfd4f54e89f77035a0e80c72df7193c0e673ebc87069d3cc98a1e4c6930bf1b8
- MD5 56a25cf898c97d3f93c8d34a379bae69
- SHA1 8cf5eb256bc21c748a18e8b572f43fe795ce3691
- SHA512 3ad6823784624d7c1f180c9dc6c4573d6f063801f8c88463d65cb76cc2619b7857cf5d938918a9d45021707dcf3cb96465e629f136e0fd2c34b03ed7d6ef6720
- SSDEEP 196608:PTRXdkztd6QWfXIp6onlTiKCqqi1L43L3hVVHnpbdAVQBWG:CdvW9onhiAqi1L47zVHjB
- TLSH T108D69E6A62BC00E8D47BD17CC6569617EBB1B41603705BDF16A086EA1F63BE42F3E350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_56a25cf898c97d3f93c8d34a379bae69_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_56a25cf898c97d3f93c8d34a379bae69_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_56a25cf898c97d3f93c8d34a379bae69_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 13.1MB
- SHA256 bfd4f54e89f77035a0e80c72df7193c0e673ebc87069d3cc98a1e4c6930bf1b8
- MD5 56a25cf898c97d3f93c8d34a379bae69
- SHA1 8cf5eb256bc21c748a18e8b572f43fe795ce3691
- SHA512 3ad6823784624d7c1f180c9dc6c4573d6f063801f8c88463d65cb76cc2619b7857cf5d938918a9d45021707dcf3cb96465e629f136e0fd2c34b03ed7d6ef6720
- SSDEEP 196608:PTRXdkztd6QWfXIp6onlTiKCqqi1L43L3hVVHnpbdAVQBWG:CdvW9onhiAqi1L47zVHjB
- TLSH T108D69E6A62BC00E8D47BD17CC6569617EBB1B41603705BDF16A086EA1F63BE42F3E350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory