General

  • Target
    2026-07-18_ef3d308360d742a406fab0a58055ecf8_cobalt-strike_coinminer_glassworm_pos_remcos_satacom_stealc_vidar_win-beast
  • Size 23.3MB
  • Sample260718-r2ccdsg16x
  • SHA256 b62c3f9f482bb6b00fdb6aa78d0b9dd18168d21e0c6e685919eaeb40626e8f9e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2026-07-18_ef3d308360d742a406fab0a58055ecf8_cobalt-strike_coinminer_glassworm_pos_remcos_satacom_stealc_vidar_win-beast
    .exe 23.3MB

2026-07-18_ef3d308360d742a406fab0a58055ecf8_cobalt-strike_coinminer_glassworm_pos_remcos_satacom_stealc_vidar_win-beast

  • IMPHASH 967f7ef13ce82f2fdd211c64705d0b61
  • SHA256 b62c3f9f482bb6b00fdb6aa78d0b9dd18168d21e0c6e685919eaeb40626e8f9e
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
12899868
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\code\app-player\out\winnt\x64\Release\hd\Source\plr\Release\HD-Player.pdb