General
- Target 2026-07-21_0c71fa14dd9bf7324834d82e575a1b84_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar_zxxz
- Size 34.7MB
- Sample260721-b3hb2abx2p
- SHA256 29e4db329c06ca665da8f9cd3cb6fe568b09602f685e0de19e882c0cc4be2373
- MD5 0c71fa14dd9bf7324834d82e575a1b84
- SHA1 ebfe3152e41c774383aa1e6b3a97cedc3426cfe6
- SHA512 f6835c75465eee80fa97ca7be0c649a37cff943be2be1a33d99e1008232d062898ded9319a87849bd7059a07d95891ecbbb84b351e9163f7a5340a7efbc67362
- SSDEEP 393216:rsGRptn+9T8OMxwQ4Vp4aBpess39Xvnv6TvACCYZf5WJH11EDOAWrQ4carYRWhJd:rsm/2Fovvn6gloaAccarYAbcVYBn
- TLSH T10187AE03B3A50096E5B7D1388AA75103D772B8574731CACF32AD02661FB7AE09A7F725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_0c71fa14dd9bf7324834d82e575a1b84_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_0c71fa14dd9bf7324834d82e575a1b84_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_0c71fa14dd9bf7324834d82e575a1b84_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar_zxxz
- Size 34.7MB
- SHA256 29e4db329c06ca665da8f9cd3cb6fe568b09602f685e0de19e882c0cc4be2373
- MD5 0c71fa14dd9bf7324834d82e575a1b84
- SHA1 ebfe3152e41c774383aa1e6b3a97cedc3426cfe6
- SHA512 f6835c75465eee80fa97ca7be0c649a37cff943be2be1a33d99e1008232d062898ded9319a87849bd7059a07d95891ecbbb84b351e9163f7a5340a7efbc67362
- SSDEEP 393216:rsGRptn+9T8OMxwQ4Vp4aBpess39Xvnv6TvACCYZf5WJH11EDOAWrQ4carYRWhJd:rsm/2Fovvn6gloaAccarYAbcVYBn
- TLSH T10187AE03B3A50096E5B7D1388AA75103D772B8574731CACF32AD02661FB7AE09A7F725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates processes with tasklist
-
Executes a VBScript file via the Windows Script Host.